Lucene search
+L

3553 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/01 4:47 a.m.4 views

Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/06/28 7:15 p.m.5 views

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

7.8CVSS5.9AI score0.00118EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/28 4:31 a.m.3 views

Malicious code in sol-web3-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/27 2:26 a.m.5 views

Malicious code in gradient-tiny (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/26 2:33 a.m.4 views

Malicious code in elitebots-prevnames (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3421b5fe5476f1e1cae544e279bf1731be45c2e887956ef9dca25d2a96dfb9e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:54 p.m.4 views

Malicious code in package-inherit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9d1285f70b25405e33ec86ff44ae1034f9d0bfca68003fe7e9bbeb67e6db3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:48 p.m.6 views

Malicious code in jquery-dragster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cf37295e01427e88bc1fd351c41960813a4b4a58c78b1ccd843bb5a46414dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:41 p.m.5 views

Malicious code in ember-addon-cache-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4666bb717c73cd9f003879d2bc483d8c0ed4f079aeb13427fc18b8487fe914b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.5 views

Faronics WINSelect Security Breach

Faronics WINSelect is an application from Faronics, Inc. It is used to customize the usage configuration of Windows computers. A security vulnerability previously existed in Faronics WINSelect version 8.30.xx.903, which arose from a decrypted configuration file containing a plaintext password use...

9.1CVSS6.9AI score0.00462EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2024/06/20 12:15 p.m.7 views

CVE-2022-48769

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports 0 that his recent MacbookPro crashes in the firmware when using the variable services at runtime. The culprit appears to be a call to...

5.5CVSS5.9AI score0.00219EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/06/20 12:36 a.m.10 views

MAL-2024-1656 Malicious code in logoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f27363cd295f9de7f2296d9c6b6d0f18222d76ff8947d98657340216d7c80efb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/18 1:33 a.m.4 views

Malicious code in mediaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b2ce3294e1295bc15a9a9967ceaa66afaddf19884a6ca9ad9fdf2c28bc2526 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/13 5:5 a.m.7 views

Malicious code in legacyreact-aws-s3-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60942b87c6d2334d09d059276cc2d838002e2e0f5093e53fc6819e1972e02282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2024/06/10 11:15 p.m.3 views

CVE-2022-37020

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities...

6.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.7 views

HP PC Security Vulnerability

HP PC is a computer product of Hewlett-Packard HP, an American company. A security vulnerability exists in the HP PC BIOS that stems from allowing elevated privileges and code execution...

6.8CVSS7.4AI score0.00177EPSS
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2024/06/07 11:4 a.m.15 views

The Justice Department Took Down the 911 S5 Botnet

The US Justice Department has dismantled an enormous botnet: According to an indictment unsealed on May 24, from 2014 through July 2022, Wang and others are alleged to have created and disseminated malware to compromise and amass a network of millions of residential Windows computers worldwide...

7.4AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.4 views

Malicious code in random-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02969e3f79ab835099da7fc1ca720e01142e1d7c098b4021ddb45930af85f11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.5 views

Malicious code in dematestsample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fa4c0092d2fc8675c490b33d703becf8a79965b1d0623cea62a0581dc4015e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.4 views

Malicious code in @juiggitea/veritatis-dicta-odit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34344ffba345843fa39f7506c0dc9642c03d6c35e9fff45fd3f121e5f5aa00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/06/03 6:53 p.m.9 views

MAL-2024-1497 Malicious code in @juiggitea/vel-et-repudiandae-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6e68320d142fd1a5b023696ebcf04d935dc6a848bc7f9e35b996e72b9c4216c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder