Lucene search
+L

3641 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/12 11:21 p.m.•9 views

Malicious code in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7024e3e37cd20e39f30c363c32d2da667b32231695491e01709a7ed3fad3a09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•18 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in errors during link processing, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS6.1AI score0.00356EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•16 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00289EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•19 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS5.9AI score0.00167EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•18 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent allows attackers to gain unauthorized access to protected information.

Acronis Agent’s backup and recovery software for computers and servers involves exposing protected information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.3AI score0.0018EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/04 6:13 p.m.•8 views

Malicious code in bank_cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70064e0fa01accdeb5e78c99cf3b86d47cff2ad6e3bec52c9e45091e600bc5fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/03 1:21 a.m.•5 views

Malicious code in @badolkhan420/fca-badol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436ac692985a2fae4a79ec7010810f6a2b4d617ea932fab96f222989b578f74b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/10/03 1:15 a.m.•10 views

Malicious code in meta-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a73a2b61674138aaa5e5aad870296f68427a507164b679a24fbb061518fda8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/26 4:39 a.m.•8 views

Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/26 12:00 a.m.•16 views

Apple macOS Security Breach

Apple macOS is a dedicated operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access calendar data saved to a temporary directory...

3.3CVSS6.5AI score0.00272EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/25 4:59 a.m.•7 views

Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/25 4:59 a.m.•7 views

Malicious code in facebook-asuna-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2596e9dc89e4123b4f9e19dd355b77bb6fd9490a73d6e457daded1ec3ff8b89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/21 1:42 a.m.•8 views

Malicious code in @zettle-bo/inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6262bbe576936f351b23ae859a7a6109329ac53866ece0189c1a9feee444159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
NVD
NVD
•added 2023/09/20 3:15 p.m.•54 views

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS7.9AI score0.00952EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2023/09/20 3:15 p.m.•11 views

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.5AI score0.00952EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2023/09/20 2:28 p.m.•79 views

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS7AI score0.00952EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2023/09/20 2:28 p.m.•23 views

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.6AI score0.00952EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/19 4:52 a.m.•10 views

Malicious code in beta-fhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/19 4:50 a.m.•7 views

Malicious code in fca-chana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37e708fb080fb543bd5fca9f8e273bf71bd0fb1744e3026ea3e491a298cf8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/09/18 4:49 a.m.•16 views

MAL-2023-8141 Malicious code in helyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d4943ad77667e1d436da638aad2868bd742a2568f7f706380ef3b768a98fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder