Malicious code in asana-api-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bd31cc93d32eb43f77dc893e6c6cb020b5118808483c3e5e8d3ee4cf66b9cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1129 Malicious code in asana-api-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bd31cc93d32eb43f77dc893e6c6cb020b5118808483c3e5e8d3ee4cf66b9cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Ghost of Internet Explorer Will Haunt the Web for Years

Microsoft's legacy browser may be dead—but its remnants are not going anywhere, and neither are its lingering security risks...

Malicious code in metamask-state-log-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f2aa6b68c9e177ae4997861edb4ebefa1bcd766ce9db1651ed270d20908eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4573 Malicious code in metamask-state-log-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f2aa6b68c9e177ae4997861edb4ebefa1bcd766ce9db1651ed270d20908eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerability in Spring Framework affects IBM Watson Explorer (CVE-2022-22971, CVE-2022-22968, CVE-2022-22970)

Summary Spring Framework is used by IBM Watson Explorer Foundational and Analytical Components. IBM Watson Explorer has addressed the applicable CVE CVE-2022-22971, CVE-2022-22968, CVE-2022-22970. Vulnerability Details CVEID: CVE-2022-22971 DESCRIPTION: Vmware Tanzu Spring Framework is vulnerable...

Security Bulletin: Vulnerability in OpenSSL affects IBM Watson Explorer (CVE-2022-0778)

Summary OpenSSL is used by IBM Watson Explorer OneWEX and Foundational Components. IBM Watson Explorer has addressed the applicable CVE CVE-2022-0778. Vulnerability Details CVEID: CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function...

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty affect IBM Watson Explorer (CVE-2022-22475, CVE-2021-39038)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM Watson Explorer. IBM Watson Explorer has addressed the applicable CVE CVE-2022-22475, CVE-2021-39038. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liber...

It’s official, today you can say goodbye to Internet Explorer. Or can you?

Today, the Internet Explorer IE 11 desktop application goes out of support and will be retired for certain versions of Windows 10. The retirement consists of two phases. During the first phase—the redirection phase—devices will be progressively redirected from IE to Microsoft Edge over the...

Microsoft Patch Tuesday, June 2022 Edition

Microsoft on Tuesday released software updates to fix 60 security vulnerabilities in its Windows operating systems and other software, including a zero-day flaw in all supported Microsoft Office versions on all flavors of Windows thats seen active exploitation for at least two months now. On a...

Patch Tuesday - June 2022

June's Patch Tuesday sees Microsoft releasing fixes for over 60 CVEs. Top of mind for many administrators this month is CVE-2022-30190, also known as Follina, which was observed being exploited in the wild at the end of May. Microsoft provided mitigation instructions disabling the MSDT URL protoc...

Description of the security update for SharePoint Server Subscription Edition: June 14, 2022 (KB5002224)

None None...

Windows File Explorer Driver Privilege Escalation

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

Exploit Title: Real Player 16.0.3.51 - 'external::Import' Directory Traversal to Remote Code Execution RCE Google Dork: n/a Date: May 31, 2022 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: ver. 16.00.282, 16.0.3.51, Cloud 17.0.9.17,...

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

Design/Logic Flaw

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

CVE-2022-24077

CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

PT-2022-16455

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer Beta affected versions not specified Description The issue allows an attacker to execute arbitrary code with System privilege via malicious DLL injection. This can potentially lead to significant system compromise...