MAL-2022-4471 Malicious code in mantis-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5554ac604f20a4e97ec11d3c686e7c9bcc7245c43454a14a58033116e58d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mantis-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5554ac604f20a4e97ec11d3c686e7c9bcc7245c43454a14a58033116e58d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

All Vulnerabilities for rutherfordcountync.gov Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| rutherfordcountync.gov ---|--- Open Bug...

gilacountyaz.gov Cross Site Scripting vulnerability OBB-2825277

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gilacountyaz.gov ---|--- Open Bug Bount...

westerncape.gov.za Cross Site Scripting vulnerability OBB-2818124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| westerncape.gov.za ---|--- Open Bug...

Roaming Mantis Financial Hackers Targeting Android and iPhone Users in France

The mobile threat campaign tracked as Roaming Mantis has been linked to a new wave of compromises directed against French mobile phone users, months after it expanded its targeting to include European countries. No fewer than 70,000 Android devices are said to have been infected as part of the...

Tiny Mantis Botnet Can Launch More Powerful DDoS Attacks Than Mirai

By Waqas Mantis Botnet launched 3,000 DDoS attacks in one month using only 5,000 small bots after which Cloudflare dubbed… This is a post from HackRead.com Read the original post: Tiny Mantis Botnet Can Launch More Powerful DDoS Attacks Than Mirai...

All Vulnerabilities for cgb.edu.co Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| cgb.edu.co ---|--- Open Bug Bounty...

org.jvnet.hudson.main:hudson-war (1.222), org.jvnet.hudson.plugins:active-directory (1.3) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.222)

org.jvnet.hudson.main:hudson-core MAVEN version 1.222 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.222 - org.jvnet.hudson.plugins:active-directory 1.3 -...

org.jvnet.hudson.main:hudson-test-harness (1.281), org.jvnet.hudson.main:hudson-war (1.281) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.281)

org.jvnet.hudson.main:hudson-core MAVEN version 1.281 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.281 - org.jvnet.hudson.main:hudson-war 1.281 -...

org.jvnet.hudson.main:hudson-war (1.213), org.jvnet.hudson.plugins:checkstyle (1.0) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.213)

org.jvnet.hudson.main:hudson-core MAVEN version 1.213 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.213 - org.jvnet.hudson.plugins:checkstyle 1.0 -...

org.jvnet.hudson.main:hudson-war (1.236), org.jvnet.hudson.plugins:locale (1.0) +4 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.236)

org.jvnet.hudson.main:hudson-core MAVEN version 1.236 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.236 - org.jvnet.hudson.plugins:locale 1.0 -...

org.jvnet.hudson.main:hudson-war (1.245), org.jvnet.hudson.plugins:disk-usage (0.5) +4 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.245)

org.jvnet.hudson.main:hudson-core MAVEN version 1.245 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.245 - org.jvnet.hudson.plugins:disk-usage 0.5 -...

Mantis Botnet Behind the Largest HTTPS DDoS Attack Targeting Cloudflare Customers

The botnet behind the largest HTTPS distributed denial-of-service DDoS attack in June 2022 has been linked to a spate of attacks aimed at nearly 1,000 Cloudflare customers. Calling the powerful botnet Mantis, the web performance and security company attributed it to more than 3,000 HTTP DDoS...

gis.south-ayrshire.gov.uk Cross Site Scripting vulnerability OBB-2759371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gis.south-ayrshire.gov.uk ---|--- Open...

All Vulnerabilities for pregase.santacruz.gov.ar Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pregase.santacruz.gov.ar ---|--- Open B...

al-ns1.ap.gov.br Cross Site Scripting vulnerability OBB-2740091

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| al-ns1.ap.gov.br ---|--- Open Bug Bount...

uczelnie.edu.pl Open Redirect vulnerability OBB-2733948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| uczelnie.edu.pl ---|--- Open Bug Bounty...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the filedownload.php process. An attacker can execute arbitrary JavaScript code by attaching and triggering malicious SVG documents. Details Cross-site scripting or...

CVE-2022-33910

An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, filedownload.php opens the SVG document in a browser tab instead of downloading it as a file, causing the JavaScri...