Lucene search
+L

5667 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 3:17 p.m.•8 views

Malicious code in pupeteer-firefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e78ebba47b9530f5cec2807eb9cb483e2213f561b35165dbd964249a4814516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/07 3:17 p.m.•3 views

Malware in pupeteer-autoscroll-down

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/11/07 11:15 a.m.•28 views

CVE-2024-10526

Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation directory with WRITEDACL permission to the BUILTIN\Users group. This allows local users who are not administrators to grant themselves the Full Control permission on...

8.6CVSS0.00171EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/07 6:33 a.m.•5 views

Malware in client-req-scopes

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 6:15 a.m.•5 views

Malicious code in gimahas-val-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 639e8100bfb3a2820e6d3c772238cb7840cb62c354728b1feaadedd2052471f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 5:11 a.m.•7 views

Malicious code in myplaintext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84bc5ee93e728db876b0e1c3d63c48f14946591c97e1e924c10ca3d60037ffe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/07 5:11 a.m.•4 views

Malware in valorantengine

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/07 5:11 a.m.•3 views

Malware in aav6

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/07 2:58 a.m.•6 views

Malware in eth-namehash

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/07 1:23 a.m.•3 views

Malware in eth-rperrors

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:55 a.m.•8 views

Malicious code in webb3-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aaeecf6e2f692d69483d7fe98783533279175704f115f53cbf1bfa223a08a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/07 12:50 a.m.•3 views

Malware in web3tokn

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:23 a.m.•14 views

Malicious code in openzepplin-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96160503f6efd74b51cbb0434c82e4d7e8e07d087e3d9578d56ab5563071bcd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/07 12:23 a.m.•6 views

Malware in openzepplin-solidity

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/11/07 12:00 a.m.•74 views

CVE-2020-11921

A security vulnerability was identified in Lush 2 (versions through 2020-02-25 ) and several other products, including Tk-star , Epson devices, One2Track , Brother printers, Svakom , and Loven models. The root cause is a lack of Bluetooth traffic encryption , which allows an attacker to hijack an...

8.8CVSS7.3AI score0.00245EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•10 views

CVE-2020-11921: Incorrect Default Permissions

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

8.8CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/06 5:37 a.m.•6 views

Malware in wb-eth3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2024/11/06 5:35 a.m.•8 views

MAL-2024-10441 Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/06 5:35 a.m.•3 views

Malware in wb3-eth

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/11/06 4:13 a.m.•5 views

Malware in etherscaan-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder