1633 matches found
QBot Malware Exploiting Windows Calculator to Compromise Devices
By Deeba Ahmed According to researcher "ProxyLife" on Twitter, QBot malware, aka QakBot, has been exploiting the Windows 7 Calculator app… This is a post from HackRead.com Read the original post: QBot Malware Exploiting Windows Calculator to Compromise Devices...
Malicious Package
Overview compensation-calculator is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Malicious code in calculator_artificialinteligence (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682963f66b81c3c337acfa4d153dc6eca46b85977ccf428a6feb1896ab645a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ntnx-price-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c86ab2b980dc01647fcbd1efec95243331e3abcdccf594294055f24b6da0b5c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4967 Malicious code in ntnx-price-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c86ab2b980dc01647fcbd1efec95243331e3abcdccf594294055f24b6da0b5c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zmarta-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abba4247122c09867bf8c340fcc9f89f7979ba2e31e13f19b05e05f514487c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7403 Malicious code in zmarta-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abba4247122c09867bf8c340fcc9f89f7979ba2e31e13f19b05e05f514487c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WP-CRM <= 1.2.1 - CSV Injection
The plugin does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability. 1. Add new person and put the following CSV calculator payload into the Display Name, Phone Number and Description field and save the entry. payload : =cmd|' /C calc'!'A...
new packages: gnome-calculator
An update is available for gnome-calculator. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
CVE-2022-1267
The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Reflected Cross-Site Scripting...
WordPress plugin BMI BMR Calculator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress BMI BMR Calculator 1.3 and earlier versions have a cross-site scripting vulnerability that stems fr...
Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK® matrix evaluation for defenders
The MITRE Center for Threat-Informed Defense, Microsoft, and other industry partners collaborated on a project that created a repeatable methodology for developing a top MITRE ATT&CK® techniques list. The method aims to facilitate navigation of the ATT&CK framework, which could help new defenders...
Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK® matrix evaluation for defenders
The MITRE Center for Threat-Informed Defense, Microsoft, and other industry partners collaborated on a project that created a repeatable methodology for developing a top MITRE ATT&CK® techniques list. The method aims to facilitate navigation of the ATT&CK framework, which could help new defenders...
Prime95 Version 30.7 build 9 - Remote Code Execution (RCE)
Exploit Title: Prime95 Version 30.7 build 9 - Remote Code Execution RCE Discovered by: Yehia Elghaly Discovered Date: 2022-04-25 Vendor Homepage: https://www.mersenne.org/ Software Link : https://www.mersenne.org/ftproot/gimps/p95v307b9.win32.zip Tested Version: 30.7 build 9 Vulnerability Type:...
Prime95 30.7 Build 9 Buffer Overflow Exploit
Exploit Title: Prime95 Version 30.7 build 9 Buffer Overflow RCE Discovered by: Yehia Elghaly Vendor Homepage: https://www.mersenne.org/ Software Link : https://www.mersenne.org/ftproot/gimps/p95v307b9.win32.zip Tested Version: 30.7 build 9 Vulnerability Type: Buffer Overflow RCE Local Tested on O...
CVE-2022-1391
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...
CVE-2022-1391
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...
CVE-2022-1391
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...
CVE-2022-1391 Cab fare calculator < 1.0.4 - Unauthenticated LFI
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...
PT-2022-13851 · WordPress · Cab Fare Calculator
Name of the Vulnerable Software and Affected Versions: Cab fare calculator WordPress plugin versions prior to 1.0.4 Description: The issue is related to the lack of validation of the controller parameter, which is used in require statements. This could lead to Local File Inclusion issues...