41 matches found
illusion-rs
Windows UEFI Blue Pill Type-1 Hypervisor en Rust Nombre en clave: Illusion Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ Un hypervisor de investigación tipo-1 basado en Rust, ligero, con seguridad de memoria y extremadamente rápido, con hooks para...
CVE-2022-46484
CVE-2022-46484 Data Illusion Survey Software Solutions NGSurvey v2.4.28 及更早版本中存在密码保护调查问卷的信息泄露漏洞，攻击者可利用该漏洞查看调查问卷的密码，进而未经授权地提交问卷。...
Malicious Package
Overview illusion-datalab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-17423 Malicious code in illusion-datalab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6004785b370b58ab360f70d7959fad47ec55ec609e8556217976fc405a610b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in illusion-datalab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6004785b370b58ab360f70d7959fad47ec55ec609e8556217976fc405a610b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You don't control which bug lands. You control what it can reach once it does. That is a question abo...
CVE-2026-2919
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for...
CVE-2025-15479: Improper Neutralization of Input During Web Page Generation
Stored cross-site scripting XSS, CWE-79 in the survey content and administration functionality in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4 on all supported platforms on Windows and Linux servers allows authenticated remote users with survey creation or edit privileges to execute...
PT-2026-1656
Name of the Vulnerable Software and Affected Versions Data Illusion Zumbrunn NGSurvey Enterprise Edition version 3.6.4 Description The software contains a stored cross-site scripting issue. This affects the survey content and administration functionality, allowing authenticated remote users with...
Data Illusion Zumbrunn NGSurvey Enterprise Edition 安全漏洞
Data Illusion Zumbrunn NGSurvey Enterprise Edition is a questionnaire and data collection system from the Swiss company Data Illusion Zumbrunn. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey Enterprise Edition version 3.6.4, which stems from improper coding of survey content a...
Data Illusion Zumbrunn NGSurvey 安全漏洞
Data Illusion Zumbrunn NGSurvey is an online survey and data collection platform from Data Illusion Zumbrunn, Inc. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey that stems from improper authorization and could allow an arbitrarily logged-in user to gain access to other users'...
CVE-2025-13829: Incorrect Authorization
Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...
EUVD-2022-49288
Malicious code in bioql PyPI...
Slient-URL-Exploit
URL Exploit Hidden Downloader URL contamination and muted Jav...
Malicious code in illusion_d6ark_5gyai_topaz (npm)
The package illusiond6ark5gyaitopaz was found to contain malicious code...
MAL-2025-40992 Malicious code in zinnia_ewxcy_whjjp_illusion (npm)
The package zinniaewxcywhjjpillusion was found to contain malicious code...
New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users
A novel phishing kit has been observed impersonating the login pages of well-known cryptocurrency services as part of an attack cluster codenamed CryptoChameleon that's designed to primarily target mobile devices. "This kit enables attackers to build carbon copies of single sign-on SSO pages, the...
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...
CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...