Lucene search
+L

708 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.5 views

Malicious code in yandex-yt-proto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c9f270b18c048619a98a11ad6711b3ede1d6d8ea3486df6a9825486efcae60c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 10:11 a.m.16 views

MAL-2023-988 Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 10:11 a.m.11 views

MAL-2023-991 Malicious code in yandex-text-processing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad3121cecef8dbde04c26103711664c19d881b92cc44b9ba2e1bc590c21b771 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.9 views

Malicious code in yandex-yt-transfer-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e8ad10f31088a063adf3ff93799c1850d56418c603e0af2e811977873b7ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 10:11 a.m.23 views

MAL-2023-994 Malicious code in yandex-yt-transfer-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e8ad10f31088a063adf3ff93799c1850d56418c603e0af2e811977873b7ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.3 views

Malicious code in yandex-yt-yson-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef8f5064d17e16f308f05ff124d515f803d1acfdc65fa58b4c26a8ac52041b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 10:11 a.m.20 views

MAL-2023-995 Malicious code in yandex-yt-yson-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef8f5064d17e16f308f05ff124d515f803d1acfdc65fa58b4c26a8ac52041b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
Snyk
Snyk
added 2023/01/29 3:29 p.m.6 views

Malicious Package

Overview yandex-cfg-env is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.6 views

Malicious Package

Overview yandex-yt-proto is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.6 views

Malicious Package

Overview yandex-yt-driver-rpc-bindings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.6 views

Malicious Package

Overview yandex-text-processing is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.3 views

Malicious Package

Overview yandex-passport-vault-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.2 views

Malicious Package

Overview yandex-yt-transfer-manager-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.3 views

Malicious Package

Overview yandex-meteo-flow is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.7 views

Malicious Package

Overview yandex-global-state-controller is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.6 views

Malicious Package

Overview yandex-yt-yson-bindings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
HackRead
HackRead
added 2023/01/29 12:08 a.m.42 views

Yandex Source Code Online Leaked, Company Denies Hack

By Waqas The threat actor has dumped a whopping 44.7 GB worth of Yandex data, including its source code repository, on a popular hacker forum. This is a post from HackRead.com Read the original post: Yandex Source Code Online Leaked, Company Denies Hack...

0.8AI score
SaveExploits0
OSV
OSV
added 2023/01/23 6:15 p.m.8 views

CVE-2023-22721

Auth. Stored Cross-Site Scripting XSS in Oi Yandex.Maps for WordPress = 3.2.7 versions...

5.4CVSS6.1AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.10 views

WordPress plugin Oi Yandex.Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.4AI score0.00383EPSS
SaveExploits0References2
HackRead
HackRead
added 2022/09/02 7:27 p.m.81 views

Anonymous hacked Russian Yandex taxi app causing a massive traffic jam

By Waqas Anonymous has confirmed to Hackread.com that the attack on the Yandex Taxi app was carried out in cooperation with the IT Army of Ukraine. This is a post from HackRead.com Read the original post: Anonymous hacked Russian Yandex taxi app causing a massive traffic jam...

2.7AI score
SaveExploits0
Rows per page
Query Builder