Lucene search
+L

1443 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•11 views

Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•15 views

MAL-2022-5294 Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•9 views

Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•10 views

MAL-2022-5293 Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•8 views

Malicious code in storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3607a0554a0463b3991dbaa481801aa5e3519da54506a5967664c934d0d6836 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•16 views

MAL-2022-112 Malicious code in @azure-tests/perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0724245e727790fb75c31579601a9d00160e01fd720d1dae58dab67537157970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•10 views

MAL-2022-111 Malicious code in @azure-tests/perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c435c2b1738c33dab5842fd1b25457f25c0537f25ae2b5b59ced164335686b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•11 views

Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•22 views

MAL-2022-1329 Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•11 views

Malicious code in eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9babd1468e42173ab131cb6119eb9b4c94b572ad32923d658b73a7c5ca1a35ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•14 views

MAL-2022-2895 Malicious code in eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9babd1468e42173ab131cb6119eb9b4c94b572ad32923d658b73a7c5ca1a35ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•9 views

Malicious code in storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec10706b700f85078575711f130d2a6f13bfd273978be1dc44bbeecfb13d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•16 views

MAL-2022-6309 Malicious code in storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec10706b700f85078575711f130d2a6f13bfd273978be1dc44bbeecfb13d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/15 2:15 p.m.•14 views

CVE-2022-20183

In hypxcreateblobdmabuf of faceauthhypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

6.7CVSS6.7AI score0.00111EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/01 9:19 a.m.•12 views

Malicious code in @image-process-library/blob-to-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97f201a6169602b9dcfdcb3be126c7d1f1a71e3aa1dab3330d18f7437f199f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/05/26 12:00 a.m.•17 views

The vulnerability of the encryption algorithm implementation according to GOST 34.12 in the CTR_OMAC library, which is used in the implementation of the OpenSSL protocol, allows a perpetrator to trigger buffer overflows, provided that the server uses 512-bit secret keys.

The vulnerability of the encryption algorithm implementation according to GOST 34.12 for the CTROMAC library, used in the implementation of the OpenSSL protocol, is related to errors in processing the encryption key for the BLOB object a large binary object in the...

5.9CVSS7.4AI score0.01684EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2022/05/14 1:14 a.m.•16 views

GHSA-3V63-F83X-37X4 Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors...

5CVSS7.3AI score0.84408EPSS
SaveExploits8References12
Github Security Blog
Github Security Blog
•added 2022/05/14 1:14 a.m.•51 views

Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to create JSP files in arbitrary directories via unspecified vectors...

5CVSS9AI score0.84408EPSS
SaveExploits8References13Affected Software1
OSV
OSV
•added 2022/05/02 3:22 a.m.•28 views

GHSA-XRPQ-63MP-9VCW phpMyAdmin HTTP Response Splitting Vulnerability

CRLF injection vulnerability in bsdispasmimetype.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the 1 ctype and possibly 2 filetype parameters...

7.5CVSS9.3AI score0.01433EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/02 3:22 a.m.•45 views

phpMyAdmin HTTP Response Splitting Vulnerability

CRLF injection vulnerability in bsdispasmimetype.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the 1 ctype and possibly 2 filetype parameters...

7.5CVSS7.1AI score0.01433EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder