Invoice Ninja 5.10.10 Insecure Deserialization / Remote Code Execution

Invoice Ninja versions 5.8.22 through 5.10.10 allows for remote code execution by leveraging a PHP deserialization vulnerability. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Invoice Ninja...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7289-3)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7289-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7291-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7291-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Invoice Ninja 5.10.10 Insecure Deserialization / Remote Code Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Invoice Ninja unauthenticated PHP Deserialization Vulnerability', 'Description' = %q Invoice Ninja is a free invoicing software for small...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7294-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7294-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

USN-7289-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

USN-7288-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7288-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7288-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Ubuntu 16.04 LTS : Linux kernel (KVM) vulnerabilities (USN-7262-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7262-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Malicious code in @maheshtestorg/maheshtestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eacc15d981c527f9ae0a2007c6a379418fa4fd05d4fe903b0216e19aaed08634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @supera/share (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c348a3e52ca7aa30cd6b9bd7234d6385f1305e8c0f04c400ff236df303f06628 Any computer that has this package install...

MAL-2025-2234 Malicious code in @supera/aaaaaaaaaaa (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d347fb8b1e6f331c8dc5ba623c0b5f80932085711d95fd7e3f209c5180b5f79e Any computer that has this package install...

Malicious code in zztest890 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0bfcc0f336c7ee2a414f1d146dc59634be795c3a17855e4f9f62d26c58958e Any computer that has this package install...

Malicious code in my-archon (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7bbe8cfdc04ced4b0dff759d1be7c1edfc86383d562400758b12247002608f Any computer that has this package install...

Malicious code in archon4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec2543510c509cdbd699b1c37ba00b56f4d5004085b9e485f6541b23a6e18c2 Any computer that has this package install...

Malicious code in bqtop (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 981f095c01601ef6fde53de3f74ea4bcd30cb63f9467bf1006c4563c033a83f4 Any computer that has this package installed or running...

Malicious code in app_custom_pinterest (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eda30e8662c93eff9aaf1eab0b5e8b94ded5b54ef5e06511df7f16fe714aa9 Any computer that has this package install...

Malicious code in bm_pinterest (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db53ad3a5da691f044a5de461b6045524d00aa3877c21a780694c922ede4c76a Any computer that has this package install...

Exploit for Execution with Unnecessary Privileges in Microsoft

CVE-2024-43583 - Windows Privilege Escalation Exploit Author...

RaspberryMatic 3.73.9.20240130 Remote Code Execution

RaspberryMatic / OCCU contains a unauthenticated remote code execution vulnerability, caused by multiple issues within the Java based HMIPServer.jar component. The webui allows for Firmware uploads which can be reached through the URL /pages/jpages/system/DeviceFirmware/addFirmware. This allows a...