“Free UK visa” offers on WhatsApp are fakes

A student friend recently shared a WhatsApp message, unsure if it was scam. The message claims to offer an easy to route to free visas, housing, accommodation, and medicine access. Heres how we know it was a scam, and where it lead. It read as follows: UK GOVERNMENT JOB RECRUITMENT 2022: This is...

CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1933 Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7079 Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7080 Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in samples-web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab462c57154f38ea0e59c31fbae08a177f4bfb366e428cba103161237fa8efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doom-workers-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea187c65ee7f8768c6ebe755e79017a5c014e3892dd3c10a6d81a698f285580e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workers-airtable-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5588aad6e50161fade38504e24443dd4e4a3f699dd0e73ef7f3152777c0d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workers-airtable-form-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6ec5be124bef45dddf0f1e162e7f8c76d422c7a6c77c0d58f0e201072ac052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7222 Malicious code in workers-airtable-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5588aad6e50161fade38504e24443dd4e4a3f699dd0e73ef7f3152777c0d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2570 Malicious code in doom-workers-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea187c65ee7f8768c6ebe755e79017a5c014e3892dd3c10a6d81a698f285580e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2569 Malicious code in doom-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f58df1caf334b762e8ad7b77b13c8b7d6c1d8b928ebaaca0b843e8692e0e5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doom-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f58df1caf334b762e8ad7b77b13c8b7d6c1d8b928ebaaca0b843e8692e0e5263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ALPINE-CVE-2022-31622

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...

Ubuntu 18.04 LTS / 20.04 LTS : Thunderbird vulnerabilities (USN-5345-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5345-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing contex...

AlmaLinux 8 : firefox (ALSA-2022:0510)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:0510 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs...

AlmaLinux 8 : thunderbird (ALSA-2022:0535)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:0535 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs...