Lucene search
+L

4053 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:25 p.m.9 views

Malicious code in aws-instance-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5892ee8a63b04ab411e3502b2e75dff16debff01b4903c74798ec7f6fa11303b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:20 p.m.12 views

MAL-2022-5961 Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:20 p.m.6 views

Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:17 p.m.9 views

MAL-2022-1536 Malicious code in bfx-facs-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c116597ad74c3e04a0c0db25dec7947aa08f23e97b8e619c0fa6cf260004ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.6 views

Malicious code in bfx-facs-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c116597ad74c3e04a0c0db25dec7947aa08f23e97b8e619c0fa6cf260004ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:09 p.m.8 views

Malicious code in wf_scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27d80eeb4ae39c661ea3e04c2de89d70136bcf876cac906eaf89c48f2d621c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:00 a.m.14 views

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software, a component of the Oracle Fusion Middleware software platform. This vulnerability allows an attacker to execute arbitrary code, as well as to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software component of the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as...

9CVSS8.2AI score0.34677EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2022/06/04 10:30 p.m.43 views

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

7.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/05/25 10:47 a.m.66 views

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE(CVE-2022-0540)...

9.8CVSS7.6AI score0.88057EPSS
SaveExploits2
OSV
OSV
added 2022/05/24 5:44 p.m.14 views

GHSA-FQFF-VCVX-68H3 Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS6.6AI score0.01361EPSS
SaveExploits2References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:44 p.m.29 views

Grav CMS Cross-Site Request Forgery (CSRF)

The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website CSRF...

8.8CVSS7.1AI score0.02899EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2022/05/18 3:15 p.m.7 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS6.2AI score0.00572EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/18 3:15 p.m.23 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS0.00572EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.7 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6AI score0.00528EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/18 3:15 p.m.9 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS6.2AI score0.00528EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/18 3:15 p.m.23 views

CVE-2022-27632

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

8.8CVSS0.00528EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 3:15 p.m.4 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

4.8CVSS6.2AI score0.00572EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/18 3:15 p.m.21 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions,...

6.8CVSS8.8AI score0.00528EPSS
SaveExploits0References2Affected Software8
Cvelist
Cvelist
added 2022/05/18 9:50 a.m.37 views

CVE-2022-28717

Cross-site scripting vulnerability in RebooterWATCH BOOT nino RPC-M2C End of Sale all firmware versions, WATCH BOOT light RPC-M5C End of Sale all firmware versions, WATCH BOOT L-zero RPC-M4L End of Sale all firmware versions, WATCH BOOT mini RPC-M4H End of Sale all firmware versions, WATCH BOOT...

6.1AI score0.00572EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/18 9:50 a.m.89 views

CVE-2022-28717

CVE-2022-28717 is a cross-site scripting vulnerability reported in MEIKYO ELECTRIC devices (notably Rebooter family: WATCH BOOT nino RPC-M2C, WATCH BOOT light RPC-M5C, WATCH BOOT L-zero RPC-M4L, WATCH BOOT mini RPC-M4H, WATCH BOOT nino RPC-M2CS, WATCH BOOT light RPC-M5CS, WATCH BOOT L-zero RPC-M4...

4.8CVSS5.7AI score0.00572EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder