Malicious code in firestore-stripe-payments-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a954dab9c9b1ad5f59a18d120d64769401f36ce122fc130f6bd1e34286647e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3054 Malicious code in firestore-stripe-payments-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a954dab9c9b1ad5f59a18d120d64769401f36ce122fc130f6bd1e34286647e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FireStorePwn - Firestore Database Vulnerability Scanner Using APKs

fsp scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication. If there are problems with the security rules, attackers could steal, modify or delete data and raise the bill. Install fsp sudo wget...

firestore:firestore_serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5691535105720320 Project: firestore Fuzzing Engine: afl Fuzz Target: serializerfuzzer Job Type: aflasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xfffffffffffffff1 Crash State: pbreleasesinglefield pbrelease pbdecode...

firestore:firestore_serializer_fuzzer: Crash in allocate_field

Detailed Report: https://oss-fuzz.com/testcase?key=5749717813428224 Project: firestore Fuzzing Engine: afl Fuzz Target: serializerfuzzer Job Type: aflasanfirestore Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: allocatefield pbdecbytes decodepointerfiel...

firestore:serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5650431242141696 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000187eef Crash State: pbreleasesinglefield pbrelease...

firestore:serializer_fuzzer: Crash in allocate_field

Detailed Report: https://oss-fuzz.com/testcase?key=5142301747970048 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerubsanfirestore Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffffd Crash State: allocatefield pbdecbytes...

MobiSystems Ltd.: Firebase Firestore insecure database

Summary: The app is exposing a firebase database url that has no read/write protections. Steps To Reproduce: 1. Decompile the Android app 2. Do a string search for firebasedatabase 3. Use the project name i.e. msdict-dev in combination with the Firestore REST API to modify the database. Supportin...

Mac-Focused Malvertising Campaign Abuses Google Firebase DBs

A malvertising group named VeryMal that targets Mac users has changed up its tactics, ditching steganography as its obfuscation technique. Instead, it’s using ad tags that fetch a payload from Google Firebase in order to redirect users to malicious pop-ups. Confiant estimates that close to 1...