Lucene search
+L

5653 matches found

Github Security Blog
Github Security Blog
•added 2024/06/12 11:38 p.m.•3 views

Malware in ozon-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/12 11:38 p.m.•3 views

Malware in ozonid

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2024/06/12 6:15 p.m.•14 views

CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

6.8CVSS5.8AI score0.00181EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/12 4:18 a.m.•5 views

Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33c62d31d74de8fa6a7a3911507ce9a8d513bccb45ff1b51b7fbb9068920d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•8 views

CVE-2024-5559: Use of a Broken or Risky Cryptographic Algorithm

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...

6.8CVSS6.3AI score0.00181EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•3 views

PT-2024-5423

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation in V8, allowing a remote attacker to perform out of bounds memory access via a...

8.8CVSS6AI score0.99979EPSS
SaveExploits10References70
Github Security Blog
Github Security Blog
•added 2024/06/11 10:18 a.m.•4 views

Malware in bootstrap-npm-webpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 7:55 a.m.•4 views

Malware in apl-validator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 7:55 a.m.•4 views

Malware in mmsdk-apml-htmlrenderer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/11 6:54 a.m.•6 views

Malicious code in code.cloudflare.ajax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5869f17e67758b1fd6d47d84b2ab8d46f7912558ed8120de69bfc64ed5c0063d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/06/11 6:54 a.m.•3 views

Malware in coe.com

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 6:54 a.m.•3 views

Malware in code.jquery.ajax

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 6:54 a.m.•4 views

Malware in code.cloudflare.com

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 6:54 a.m.•4 views

Malware in code.cloudflare.ajax

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/11 6:25 a.m.•5 views

Malware in vue-webviews

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•21 views

PT-2024-4213 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS and FortiProxy versions are affected, but specific versions are not provided in the highest-priority sources. Description: A cryptographic algorithm issue exists that could cause denial of service, device reboot, or an attack...

6.8CVSS7.2AI score0.00181EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•4 views

CVE-2024-37130: Uncontrolled Search Path Element

Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the admin user and gain full control of the...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/06/07 12:00 a.m.•22 views

Apache Wicket Unauthorized Access Arbitrary Code Full Control

The vulnerability of the Java-based web application framework Apache Wicket is related to improper code generation management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, and gain full contr...

10CVSS5.9AI score0.02127EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/04 9:47 a.m.•4 views

Malware in glup-debugger-log

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 6:53 p.m.•3 views

Malware in win66lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder