Lucene search
+L

3810 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/21 12:26 p.m.5 views

Malicious code in vngage-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77997c176ebf86e632ccd34ea1a15c98774025d929070dc0ef488df3dd854e67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/21 12:26 p.m.7 views

MAL-2022-6952 Malicious code in vngage-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77997c176ebf86e632ccd34ea1a15c98774025d929070dc0ef488df3dd854e67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:25 p.m.5 views

Malicious code in aws-instance-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5892ee8a63b04ab411e3502b2e75dff16debff01b4903c74798ec7f6fa11303b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:20 p.m.3 views

Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:20 p.m.8 views

MAL-2022-5961 Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.3 views

Malicious code in bfx-facs-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c116597ad74c3e04a0c0db25dec7947aa08f23e97b8e619c0fa6cf260004ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.5 views

MAL-2022-1536 Malicious code in bfx-facs-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c116597ad74c3e04a0c0db25dec7947aa08f23e97b8e619c0fa6cf260004ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:9 p.m.4 views

Malicious code in wf_scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27d80eeb4ae39c661ea3e04c2de89d70136bcf876cac906eaf89c48f2d621c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.12 views

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software, a component of the Oracle Fusion Middleware software platform. This vulnerability allows an attacker to execute arbitrary code, as well as to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software component of the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as...

9CVSS8.2AI score0.34677EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2022/06/04 10:30 p.m.37 views

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/05/25 10:47 a.m.60 views

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE(CVE-2022-0540)...

9.8CVSS7.6AI score0.88057EPSS
SaveExploits2
vulnersOsv
vulnersOsv
added 2022/05/24 7:3 p.m.5 views

africa.absa:inception-api (>=1.1.0 <=1.2.0), africa.absa:inception-application (>=1.1.0 <=1.2.0) +16054 more potentially affected by CVE-2021-22118 via org.springframework:spring-web (>=5.3.0 <=5.3.6)

org.springframework:spring-web MAVEN version =5.3.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =4.4.0.2, =4.6.0.0 - ai.apiverse:apipulse =1.0.1 and more Source cves: CVE-2021-22118 Source advisory: OSV:GHSA-GFWJ-FWQJ-FP3V...

7.8CVSS6.7AI score0.00396EPSS
SaveExploits0
OSV
OSV
added 2022/05/24 5:44 p.m.11 views

GHSA-FQFF-VCVX-68H3 Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS6.6AI score0.02899EPSS
SaveExploits3References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:44 p.m.21 views

Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS7.1AI score0.02899EPSS
SaveExploits2References3Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/20 12:0 a.m.9 views

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-codes-api (>=1.0.0 <=1.2.0) +1533 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (>=5.5.0 <=5.5.6)

org.springframework.security:spring-security-core MAVEN version =5.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.13.0, =1.13.0, =2.2.0 - be.jidoka:jdk-keycloak-admin =1.2.0 and more Source cves: CVE-2022-22978 Source advisory:...

9.8CVSS6.7AI score0.10689EPSS
SaveExploits6
NVD
NVD
added 2022/05/18 3:15 p.m.19 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS0.00542EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/18 3:15 p.m.5 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6.2AI score0.005EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/18 3:15 p.m.18 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS0.005EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.3 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS6.2AI score0.00542EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.5 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6AI score0.005EPSS
SaveExploits0References3
Rows per page
Query Builder