Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-activity-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be919ac20b6023e27b37ab04354acc2fe0d76aadf72ab3ccea2dafed5df390a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colorred (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fd242b7e7522faa97ca79398a2ff7fec16037b2754cd07065a4eda93d612cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/api-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db95524e5bf90907d13f9109419d2a10727fd9549c599cad79231ab6359745f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Black Basta Ransomware Teams Up with Malware Stalwart Qbot

A newcomer on the ransomware scene has coopted a 14-year-old malware variant to help it maintain persistence on a targeted network in a recent attack, researchers have found. Black Basta, a ransomware group that emerged in April, leveraged Qbot, a.k.a. Quakbot, to move laterally on a compromised...

Malicious code in kruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f6d59849346dac98e4f140f1bee01314c9ae375a1c209717e73cc3c2fe48e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tangerine-state-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neo-savant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269f6641d9eb5c43ea9441f3fe764f0ac3ee148fb8d52084b63c7c61bccf8b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ms-2.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b103637ace33e42a60052af2564553178c509c8c0bfb5e92c376388891095a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31479

An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which...

Puwr - SSH Pivoting Script For Expanding Attack Surfaces On Local Networks

Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests it has. This can be used to expand out an attack surface on a local network, ...

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

Insufficient Session Expiration

Description The application NocoDB failed to invalidate the session after changing the password and In this scenario changing the password doesn't destroy the other sessions which are logged in with old passwords. Proof of Concept Login same account in two different browsers. Try to change the...

Malicious code in volcan0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ab3b6308934f22dd68a9a70e89a6d2c047ae41a45e55e1db7a9c92eaa5fedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bounty-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80028b7efd67458fe4d402b82e87526778a2276963829161633e17193ad92e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pocjenkircetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbf04e7a39de82685b8e0cb1fc6ad03deb085f0db3630624a3b736b99d0a7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in support-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a7a9b6a19738c6365da05b9f924a8b72b92ee79904ca65ce153b5563996b183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in titles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abd4ff58249068e7da5354d6c1c536d8d1c88de26e977798b1965f29fb3d91bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rkpacktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e155982820eba462dcbfa1616d8d13143172fae3248f9487a1d66ecfb674aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colourize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ad437eef591c8b1542e4b5bfda0ecd1adca3b3baec266f4d8e9abfaaf6e660 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...