CVE-2024-9095 Improper Authorization in lunary-ai/lunary

In lunary-ai/lunary version v1.4.28, the /bigquery API route lacks proper access control, allowing any logged-in user to create a Datastream to Google BigQuery and export the entire database. This includes sensitive data such as password hashes and secret API keys. The route is protected by a...

Malicious code in google-bigquery-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4effea0e9c65fae925ae0caf8f8786d929e13689c9a04786fa4b264ee26b3689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3412 Malicious code in google-bigquery-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4effea0e9c65fae925ae0caf8f8786d929e13689c9a04786fa4b264ee26b3689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

On Becoming a Contributor to the HTTP Archive

The HTTP Archive is an open source project that tracks how the web is built. Twice a month it crawls 1.3 million web pages on desktop and emulated mobile devices, and collects technical information about each of the web pages. That information is then aggregated and made available in curated...

Capturing, Analyzing and Responding to Cyber Attacks: cyberprobe

The Cyberprobe project is an open-source distributed architecture for real-time monitoring of networks against attack. The software consists of two components: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, which receives the stream...