245 matches found
EUVD-2018-0790
Malware in sbrugna...
EUVD-2018-0588
Malware in sbrugna...
EUVD-2022-29923
Malicious code in bioql PyPI...
EUVD-2022-2590
Malicious code in bioql PyPI...
45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage
Threat hunters have discovered a set of previously unreported domains, some going back to May 2020, that are associated with China-linked threat actors Salt Typhoon and UNC4841. "The domains date back several years, with the oldest registration activity occurring in May 2020, further confirming...
Linux Distros Unpatched Vulnerability : CVE-2016-2166
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an...
Linux Distros Unpatched Vulnerability : CVE-2018-17187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl...' methods. Unless a verification mo...
Linux Distros Unpatched Vulnerability : CVE-2019-0223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 C library and its language bindings c...
CVE-2022-25224
Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the application opens the site in the current frame allowing an attacker to host JavaScript code in the malicious link in order to trigger an XSS attack. The 'nodeIntegration'...
CVE-2019-7273
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery CSRF...
Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations
A high court in the Indian state of Karnataka has ordered the blocking of end-to-end encrypted email provider Proton Mail across the country. The High Court of Karnataka, on April 29, said the ruling was in response to a legal complaint filed by M Moser Design Associated India Pvt Ltd in January...
Malicious code in proton-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-862 Malicious code in proton-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-config-proton-lint (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d595489e0b5943870a58ffcd154d1a8ab7b4bbd45155465dbe9272bb6471060 Any computer that has this package install...
MAL-2025-60 Malicious code in eslint-config-proton-lint (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d595489e0b5943870a58ffcd154d1a8ab7b4bbd45155465dbe9272bb6471060 Any computer that has this package install...
Malicious code in proton-parking-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506697cca5654bda57571824a1c769ba976811a08a53a12e057f80fac4a610a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12137 Malicious code in proton-parking-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506697cca5654bda57571824a1c769ba976811a08a53a12e057f80fac4a610a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in proton-vpn-browser-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc03424432718c42f9a66d516ba38f46e70a24459369a48aba07205b744ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11069 Malicious code in proton-vpn-browser-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc03424432718c42f9a66d516ba38f46e70a24459369a48aba07205b744ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2019:2780 Red Hat Security Advisory: qpid-proton security update
Bulletin has no description...