9609 matches found
MAL-2024-360 Malicious code in wlwz-2312-2101 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37bd31b1ef04918702ea9c441062375890a29f9c8934330f534d23bc3f1acd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-228 Malicious code in wlwz-2312-0604 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ad1fbd0f24939513ab22226e41c6de9cd2b9cdd56c550df75ee5140c1c21db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-356 Malicious code in wlwz-2312-2006 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4724585c0c1a8632b57143b8fe6f1eb48784621159964ce9f3536c9dc72af6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-296 Malicious code in wlwz-2312-1400 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25467d90d98e89ea4bae91203eef4b062209423919e0015c11cd88fd544ed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Google changes wording for Incognito browsing in Chrome
Users of Chrome Canary have noticed some slight changes in the wording that Google uses for Incognito mode. Chrome Canary is mainly intended for use by developers. It’s updated nearly daily with new features, and because it can be used alongside versions of the “normal” Chrome browser known...
Exploit for Path Traversal in Saltstack Salt
CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-...
A true tale of virtual kidnapping: Lock and Code S05E02
This week on the Lock and Code podcast… On Thursday, December 28, at 8:30 pm in the Utah town of Riverdale, the city police began investigating what they believed was a kidnapping. 17-year-old foreign exchange student Kai Zhuang was missing, and according to Riverdale Police Chief Casey Warren,...
Apache OpenOffice < 4.1.15 Multiple Vulnerabilities (macOS)
The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.15. It is, therefore, affected by multiple vulnerabilities as stated in the vendor advisories and release notes. - Apache OpenOffice documents can contain links that call internal macros with arbitrary...
GitLab 13.1 < 13.12.9 / 14.0 < 14.0.7 / 14.1 < 14.1.2 (CVE-2021-22244)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data CVE-2021-22244 Note that Nessus has not tested...
ActiveAdmin CSV Injection leading to sensitive information disclosure
Impact In ActiveAdmin versions prior to 3.2.0, maliciously crafted spreadsheet formulas could be uploaded as part of admin data that, when exported to a CSV file and the imported to a spreadsheet program like libreoffice, could lead to remote code execution and private data exfiltration. The...
The vulnerability of Mozilla Firefox and Firefox Focus lies in the lack of a warning when switching to a new handler, allowing attackers to exploit it to compromise data integrity.
The vulnerability of Mozilla Firefox and Firefox Focus is related to the lack of a warning when switching to a new protocol handler. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
A week in security (December 18 – December 24)
Last week on Malwarebytes Labs: Comcast’s Xfinity breached by Citrix Bleed; 36 million customer’s data accessed How does ThreatDown Vulnerability Assessment and Patch Management work? How Outlook notification sounds can lead to zero-click exploits Update Chrome now! Emergency update patches...
Insufficient Information
Firefox is vulnerable to Insufficient Information. Under certain conditions, Firefox does not display a warning when a user attempted to navigate to a new protocol handler...
SUSE CVE-2023-6871
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox 121...
MAL-2023-8728 Malicious code in djs-sb-v13 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be29482d052cda3fe6813bef98ba0696f3311f098fcff6b8e516f252860179e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2023-6871
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox 121...
CVE-2023-6871
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox 121...
CVE-2023-6871
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox 121...
