CVE-2022-34768 Synel - eHarmony Stored XSS

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

CVE-2022-34768: Improper Neutralization of Input During Web Page Generation

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

Malicious code in yodaspeak-cloudflare-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f681261decb63857d04b9b6201be2b3bc996a9a9778fa0b9878db7f295a596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7357 Malicious code in yodaspeak-cloudflare-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f681261decb63857d04b9b6201be2b3bc996a9a9778fa0b9878db7f295a596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The 2022 US Midterm Elections' Top Security Issue: Death Threats

While cybersecurity and foreign meddling remain priorities, domestic threats against election workers have risen to the top of the list...

PT-2022-6595 · Php +5 · Php +5

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A heap buffer overflow issue was discovered in PHP. This occurs when the PHP CLI SERVER WORKERS environment variable is set to a large value. The vulnerability is related to the php cli server...

workers-b.com Cross Site Scripting vulnerability OBB-2757223

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

“Free UK visa” offers on WhatsApp are fakes

A student friend recently shared a WhatsApp message, unsure if it was scam. The message claims to offer an easy to route to free visas, housing, accommodation, and medicine access. Heres how we know it was a scam, and where it lead. It read as follows: UK GOVERNMENT JOB RECRUITMENT 2022: This is...

CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

CVE-2022-1746: Incorrect Privilege Assignment

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1933 Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7079 Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7080 Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in samples-web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab462c57154f38ea0e59c31fbae08a177f4bfb366e428cba103161237fa8efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workers-airtable-form-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6ec5be124bef45dddf0f1e162e7f8c76d422c7a6c77c0d58f0e201072ac052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doom-workers-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea187c65ee7f8768c6ebe755e79017a5c014e3892dd3c10a6d81a698f285580e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7222 Malicious code in workers-airtable-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae5588aad6e50161fade38504e24443dd4e4a3f699dd0e73ef7f3152777c0d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...