Micro Focus ArcSight Logger 跨站脚本漏洞

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software is capable of collecting and integrating data from any log-generating source for log management, searching, indexing, reporting, analyzing, and retention. A security vulnerability exists in Micro...

MAL-2022-2672 Malicious code in edx-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a45186001f92d46e485ade8cdd9152dabbe881415b90667398d14c43d98bda4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koa-colorful-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd44f0764b794e863572b93e1dd77d7927262ffcefb143a0ef4f38a205c7da27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4207 Malicious code in koa-colorful-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd44f0764b794e863572b93e1dd77d7927262ffcefb143a0ef4f38a205c7da27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ot-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2022-31186

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

Information disclosure

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

CVE-2022-31186 Leakage of excessive information into log in next-auth

NextAuth.js is a complete open source authentication solution for Next.js applications. An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log whi...

When a sextortion victim fights back

When Katie Yates suddenly started receiving nude photos of her friend, Natalie Claus, over on Snapchat, she instantly recognized that Claus had just become a victim of a sextortion attack. She also knew how Claus should respond. This happened in December 2019 when Claus was a sophomore. Both were...

Fedora: Security Advisory for golang-github-mattn-colorable (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Npm Packages Tapped Again to Target Discord Users

Threat actors once again are using the node package manager npm repository to hide malware that can steal Discord tokens to monitor user sessions and steal data on the popular chat and collaboration platform, researchers have found. A campaign discovered this week by Kaspersky researchers is hidi...

MAL-2022-5138 Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-566 Malicious code in @roborox_int/elk-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ed457be000bb1802966825eae5aceb4b0d05a18d2e7fee5065b81aa7e2140fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: golang-github-mattn-colorable-0.1.8-6.fc36

Colorable writer for windows. For example, most of logger packages doesn't show colors on windows. This package is possible to handle escape sequence for ansi color on windows...

The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.

The vulnerability of the modular interface between web servers and Rack web applications is related to improper input validation during data processing, as transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows a remote attacker to send...

Malicious Package

Overview klook-node-framework-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was...

Malicious Package

Overview @atlas-angular/logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @roboroxint/elk-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...