Authcov - Web App Authorisation Coverage Scanning

Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a different us...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samed...

Malicious Package

Overview rainbow-bridge-testing is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

The vulnerability of the Intel Ethernet ixgbe driver for Linux allows a hacker to trigger a service failure.

The vulnerability of the Intel Ethernet ixgbe driver for Linux exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...

The vulnerability of the Outside In Filters component of the Oracle Outside In Technology toolset allows a perpetrator to trigger a service failure.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology toolset exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...

Securing your IoT with Edge Secured-core devices

A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...

Malicious code in evil-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d5712e6aa578ce6e0155c58afd67199a6e5b205a0c4b3fcdf19ea860bfd4c09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2902 Malicious code in evil-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d5712e6aa578ce6e0155c58afd67199a6e5b205a0c4b3fcdf19ea860bfd4c09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testing_confusion_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34d24ea2649fd93a78070df842cca196dbff9ff405d91ffaab6742de028bf78c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zilliqa-testing-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84efbae60bf31c7ffeddbcaee26616114654695b402b38559875c541236107a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7391 Malicious code in zilliqa-testing-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84efbae60bf31c7ffeddbcaee26616114654695b402b38559875c541236107a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a60d74a7c5c26bf39fa19854d1bce3a66169cd0fe26c9e66edb7976368ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2436 Malicious code in dependency-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a60d74a7c5c26bf39fa19854d1bce3a66169cd0fe26c9e66edb7976368ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in netlify-testing-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05784f3a001a6314d0d92d3b64ec3069cde31dfa69774fd4271244ff5b619a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4808 Malicious code in netlify-testing-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05784f3a001a6314d0d92d3b64ec3069cde31dfa69774fd4271244ff5b619a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rocky_testing_confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f302a33f38de97c12d556003ef0aea8070c81fcf7286cd0ccb93d1ac314bb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dp-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e39b724cb62775393f743e7ffa809169d2b91e5afb97cdcc6973a614d02dfdf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2580 Malicious code in dp-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e39b724cb62775393f743e7ffa809169d2b91e5afb97cdcc6973a614d02dfdf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in random-testing-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ef502f975a9fcfbbb8c0a62b1a98387533477a61bb5f406fa8b312ec7865bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...