Malicious Package

Overview conf-dep-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in dep-loop-exit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad48a7ef0c36b270f48536d4c55cc157e68784983d0ac098c548b45e1935ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2424 Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6475 Malicious code in test-dep-conf-my (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2960498bfa67e98a3989cbd03788d73c13cc5c55d9d7a5cca5b9b9569b926673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dep-conf-my (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2960498bfa67e98a3989cbd03788d73c13cc5c55d9d7a5cca5b9b9569b926673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2301 Malicious code in cyclic-dep-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcee1d5b332271ae97b1de6fc97e5ac5654212a82bfdd71b3676f2dfcaeee88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cyclic-dep-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcee1d5b332271ae97b1de6fc97e5ac5654212a82bfdd71b3676f2dfcaeee88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1456 Malicious code in bananabr-dep-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec06c86d512781fc859918aefcfea7b20724e0b9334bc986a9547be543ae678 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bananabr-dep-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec06c86d512781fc859918aefcfea7b20724e0b9334bc986a9547be543ae678 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2945 Malicious code in extraneous-dev-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08815dacf458e78940833dd89e08a808779aabda6f12833e3ca42e28a3d0cdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snyk-resolve-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4aee3d2a4454c7a1edc1eb75aa97b985eb7a29056b115d2556bf743099ab559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6195 Malicious code in snyk-resolve-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4aee3d2a4454c7a1edc1eb75aa97b985eb7a29056b115d2556bf743099ab559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Chrome 78.0.3904.70 - Remote Code Execution Exploit

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Google Chrome 78.0.3904.70 Remote Code Execution

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Date: 2022-05-03 Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Google Chrome 78.0.3904.70 - Remote Code Execution

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Date: 2022-05-03 Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Backdoor.Win32.Zombam.b Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/1e3665a67201209609ae493a2a590bee.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.b Vulnerability: Remote Stack Buffer Overflow Description: z0mbie's HTTP RAT...

Mozilla Firefox 67 Array.pop JIT Type Confusion

Exploit Title: Mozilla Firefox 67 - Array.pop JIT Type Confusion Date: 2021-12-07 Type: RCE Platform: Windows Exploit Author: deadlock Forrest Orr Author Homepage: https://forrest-orr.net Vendor Homepage: https://www.mozilla.org/en-US/ Software Link:...

HackTool.Win32.Muzzer.a Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/c9291c93fce757a665352567ca13ec3f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: HackTool.Win32.Muzzer.a Vulnerability: Heap Based Buffer Overflow Description: Processing a speciall...

Mageia: Security Advisory (MGASA-2017-0039)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...