MAL-2024-9832 Malicious code in securedrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6e71494cc9a9dcef7e0a491a7cf5c91eb09f8908655726169ff32e3a94a9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4563

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is...

Design/Logic Flaw

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is...

SecureDrop 安全漏洞

SecureDrop is an open source whistleblower submission system from the Freedom of the Press Foundation. Media organizations can use it to securely accept documents from and communicate with anonymous sources. SecureDrop suffers from a security vulnerability. An attacker exploited the vulnerability...

CVE-2022-4563 Freedom of the Press SecureDrop gpg-agent.conf symlink

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is...

CVE-2022-4563 Freedom of the Press SecureDrop gpg-agent.conf symlink

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is...

CVE-2022-4563

CVE-2022-4563 affects Freedom of the Press SecureDrop. The issue concerns an unknown functionality in gpg-agent.conf where manipulation enables symlink following. Local access is required to exploit. A patch identified as b0526a06f8ca713cce74b63e00d3730618d89691 is available, and applying it is r...

CVE-2022-4563 Freedom of the Press SecureDrop gpg-agent.conf symlink

A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file gpg-agent.conf. The manipulation leads to symlink following. Local access is required to approach this attack. The name of the patch is...

PT-2022-27580 · Freedom Of The Press · Securedrop

Name of the Vulnerable Software and Affected Versions: Freedom of the Press SecureDrop affected versions not specified Description: A critical issue was found in Freedom of the Press SecureDrop, affecting some unknown functionality of the file gpg-agent.conf. The manipulation of this issue leads ...

DEF CON and Feds Partner on Anonymous Bug Submission Program

Hacking conference organizer DEF CON Communications said it plans to roll out a global anonymous bug submission platform based on the SecureDrop communications tool. During a session at DEF CON in Las Vegas last week, conference founder Jeff Moss said the goal was to launch the yet-to-be-named...

A New Way to Securely Send Information to WIRED

Announcing WIRED's new installation of SecureDrop, a better way to securely send us sensitive tips and leaks. The post A New Way to Securely Send Information to WIRED appeared first on WIRED...

Open Source Whistleblower Platform: SecureDrop

SecureDrop an open source whistleblower submission system SecureDrop is an open-source software platform for secure communication between journalists and sources whistleblowers.It was originally designed and developed by Aaron Swartz and Kevin Poulsen under the name DeadDrop. After Aaron Swartz’s...

Encryption and Silence Can be Targets' Best Assets

CANCUN–Things are getting real these days for executives, researchers, journalists and others involved in the security community. Targeted surveillance is a reality for many in the community, and researchers and activists are trying now to help them assess and address that threat to their privacy...