Malicious code in @diotoborg/rem-officia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd5f6409695b40cb79a2601b8fa4362d6ab2a1d703a5cc28ce337c6215bd7d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/rerum-occaecati (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware addaebb8c3bf773d80634739ba053c7696134ed1caa15ea508fa6eb1fe5bbe0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/blanditiis-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f93274b2c1ed95518ae52a486d5f1dbc39ac9d4a685f159705717c22e827f8f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/harum-vitae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9b09b26feaf6bc3601dc207ec470121b3b653b8c202414ea2b5c0c713b0def Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/rem-alias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59ce326dc232b7dcfea23bffaffbd0e0742c9c80cb955cb15e3e4f611874e993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-est-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99d9f412b7c4e4c961d7d7dd8c72cfdf918ab2963b8aab46d5b5b52f020602c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/recusandae-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4df9200783529df10f29b4fe97e56a1cf7c77bfaafbd76045d1f3563fced8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quos-accusantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dac7a2478a31d522e124695c39141c77dcaf1adb0cdd52d4f5ef19ddda2669a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/exercitationem-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4a181723ba2ff9df4ea976b7cb5405a17ca9b7e949877ccc329ddcdea9d316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/optio-provident-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc453c5b757978738907b9a9b8be9dfb6793b8cb4ebe72a90b201983493bd9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/occaecati-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5e777faebf47bc26816539986c6201c0bed936306739e2a2fe207a15b5a4b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d040370140af8f1fdf35233a8d44ade81b7c8c3561be0b8d4e3788a23a0882a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ex-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e30f0f24bcabf5b6bce5083307e9ba4d5f6aadd051592bbf5f715d455792651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolor-earum-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d700c9e6da7b84a19b42ed2466b0fe8ba51b97a24f185d84dd039164ff501398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/vel-labore-incidunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a51e7a3e943bacf0ec4e05fabbc4d63cd9366774a2777611041e9163b322c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquam-sit-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6b2f3b6d1068d05ee0c4e214957377943139fbbdfaa14226509d6d609844ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Regsvr32.exe (.sct) Command Delivery Server

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Regsvr32.exe .sct Command Delivery Server', 'Description' = %q This module uses the Regsvr32.exe Application Whitelisting Bypass technique as a w...

Insecure Direct Object Reference (IDOR)

in2code/powermail is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient validation of the mail parameter in the confirmationAction of the Powermail extension, allowing an unauthenticated attacker to display user-submitted data of all forms persisted by t...

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. "The attacks involve threat actors that employ methods such as the deployment of shel...