1553 matches found
MAL-2024-7750 Malicious code in discord-api-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...
Malicious code in noblox-cores-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...
MAL-2024-7757 Malicious code in noblox-cores-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...
Malicious code in noblox-core-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor...
MAL-2024-7726 Malicious code in noblox-core-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor...
Malicious code in noblox-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...
MAL-2024-7462 Malicious code in noblox-ts (npm)
This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...
Yana Security Breach
Yana is a powerful laptop application from the individual developer Lukas Bach. A security vulnerability exists in Yana version 1.0.16 and prior versions, which stems from a cross-site scripting vulnerability in the src/electron-main.ts location...
CVE-2024-6414: Direct Request
A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to direct request. It is possible to launch the attack remotely...
CVE-2024-39132
A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine at /src/DumpTS.cpp...
PT-2024-28359 · Dumpts · Dumpts
Name of the Vulnerable Software and Affected Versions: DumpTS version 0.1.0-nightly Description: A NULL Pointer Dereference issue allows attackers to cause a denial of service. This is achieved via the VerifyCommandLine function. The issue is related to the /src/DumpTS.cpp file. Recommendations:...
PT-2024-28356 · Dumpts · Dumpts
Name of the Vulnerable Software and Affected Versions: DumpTS version 0.1.0-nightly Description: A Heap Buffer Overflow issue allows attackers to cause a denial of service. This is achieved via the function PushTSBuf located at /src/PayloadBuf.cpp. Recommendations: For DumpTS version 0.1.0-nightl...
MAL-2024-6171 Malicious code in ts-wuzzi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ts-wuzzi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in yappy_ts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in looleh-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2639 Malicious code in looleh-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in firefly-shared-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2373 Malicious code in firefly-shared-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
(Pwn2Own) QNAP TS-464 Log Upload Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of log uploads. The issue results from the lack of proper...