CVE-2023-43617

An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...

CVE-2023-43617

An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...

CVE-2023-43617

An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...

Croc Security Breach

croc is a tool from the individual developers at Zack that allows any two computers to transfer files and folders simply and securely. A security vulnerability exists in Croc version 9.6.5 and prior versions, which stems from the fact that when a custom shared secret is used, the sender and...

CVE-2023-43621

An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments...

CVE-2023-43617

An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name...

Microsoft AI Researchers Accidentally Expose 38 Terabytes of Confidential Data

Microsoft on Monday said it took steps to correct a glaring security gaffe that led to the exposure of 38 terabytes of private data. The leak was discovered on the company's AI GitHub repository and is said to have been inadvertently made public when publishing a bucket of open-source training...

Malicious code in team-atf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc4bc178a5c3fa44d9ed6dfa7c429692ad3bb5b15556ee5cfcf089935bc92d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fixedwidthtable/fixedwidthtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb1ded01c24b9c7b6ce54eede679199fa8564a984ca86323c750500b1f50649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jordan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db5b69d0619a83137f953387a4c7da45c2b8cb1406cbdbc8dfdba20427b81cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-chana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37e708fb080fb543bd5fca9f8e273bf71bd0fb1744e3026ea3e491a298cf8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-28878 · Croc · Croc

Name of the Vulnerable Software and Affected Versions: Croc versions prior to 9.6.16 Description: An issue was discovered in Croc where parts of a custom shared secret may be divulged to an untrusted Relay when composing a room name. This occurs when a custom shared secret is used. Recommendation...

PT-2023-28882 · Croc · Croc

Name of the Vulnerable Software and Affected Versions: Croc versions prior to 9.6.16 Description: An issue was discovered in Croc where the shared secret, located on a command line, can be read by local users who list all processes and their arguments. Recommendations: For Croc versions prior to...

MAL-2023-8157 Malicious code in thinhdz2001-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab41a3de452cf2af66e9a0c6c82ff728a75a79b69bee1df9d834f6989e86134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-reygie-harizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b226744d0d61efb80f943c5fbb09b58cd8f8fb2fb1da081fad506086431e076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eterscan-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76972c8bfc325e599147a978e53f2e7bfc86c4c32b85cf5dfc37247e4e650e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fe0a38eab92ae516ffa0abcd348cd662325f6e1cb7ecd957bb2918d5aa7350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in centurylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d96a2f3ad371aca3dc5bd6bf227819ee63ad00b7b1283b8280dd49497d8f8590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8111 Malicious code in send-orchestrator-event-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3348279a1bc1471493fbd3415cdf02e1175ffa720b2c0df7fac42c1f7475b852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in send-orchestrator-event-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3348279a1bc1471493fbd3415cdf02e1175ffa720b2c0df7fac42c1f7475b852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...