10246 matches found
Threat actors misuse OAuth applications to automate financially driven attacks
Threat actors are misusing OAuth applications as an automation tool in financially motivated attacks. OAuth is an open standard for token-based authentication and authorization that enables applications to get access to data and resources based on permissions set by a user. Threat actors compromi...
Threat actors misuse OAuth applications to automate financially driven attacks
Threat actors are misusing OAuth applications as an automation tool in financially motivated attacks. OAuth is an open standard for token-based authentication and authorization that enables applications to get access to data and resources based on permissions set by a user. Threat actors compromi...
CVE-2023-6553
creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...
Malicious code in npm_package_babel_plugins_3_1_pragma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3632cb4fe4754d272e86ef810873600bf47c3e8c42733de77bf10571a80fc675 The OpenSSF Package Analysis project identified 'npmpackagebabelplugins31pragma' @ 99.99.99 npm as malicious. It is considered malicious because...
Different numbers of launches reported in the Dashboard vs. Activity Manager views of Director
The number of application instances displayed in Director under 'Sessions' 'Applications' and in 'User' 'Activity Manager' doesn't match, with higher numbers reported in 'Activity Manager'...
MAL-2023-8686 Malicious code in rechtspraak.insolventies (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e0d29af84c44aed4e022517fdf4ddc15b112789794ec5460c0e9acb30bd90c6 The OpenSSF Package Analysis project identified 'rechtspraak.insolventies' @ 0.9.0 npm as malicious. It is considered malicious because: - The...
Malicious code in rechtspraak.insolventies (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e0d29af84c44aed4e022517fdf4ddc15b112789794ec5460c0e9acb30bd90c6 The OpenSSF Package Analysis project identified 'rechtspraak.insolventies' @ 0.9.0 npm as malicious. It is considered malicious because: - The...
CVE-2016-4464
creationtimestamp| type| source ---|---|--- 2023-12-11 13:51:50+00:00| seen| https://t.me/arpsyndicate/1748...
Douglas-042 - Powershell Script To Help Speed Up Threat Hunting Incident Response Processes
DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed to expedite the triage process and facilitate the meticulous collection of crucial evidence derived from both forensic artifacts and the ephemeral landscape of volatile data. Its fundamental mission revolve...
MAL-2023-8683 Malicious code in rechtspraak.huwelijksgoederenregister (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cf3169f51f3ee6c09021cf60f11a4171fed6a0655488a89f8b916c949cbd03b The OpenSSF Package Analysis project identified 'rechtspraak.huwelijksgoederenregister' @ 0.12.0 npm as malicious. It is considered malicious...
MAL-2023-8676 Malicious code in privalia-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67798a086ab24af2e15f2344e63c54848b44d2abe2edb6adf1834f8dfae7be55 The OpenSSF Package Analysis project identified 'privalia-app' @ 3.0.1 npm as malicious. It is considered malicious because: - The package...
Insecure and Inflexible Forwarder Approval Mechanism (Full Access Grant)
Lines of code Vulnerability details Impact The current implementation of the onlyApprovedForwarder modifier in the Ocean smart contract has several negative impacts: 1. Security Risk: Users are exposed to a significant security risk if their forwarder is compromised. An attacker can exploit full...
Malicious code in react-hook-form-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
The U.S. Cybersecurity and Infrastructure Security Agency CISA warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers. "The vulnerability in ColdFusion CVE-2023-26360 presents as an improper access...
MAL-2023-8666 Malicious code in react-dom-16 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4cfe9e9636852d3f77e9d66db174963751bf0c61eb2364bbee74ddff0b84c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8665 Malicious code in bitboxapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ac7326795e975d78c457b2260890b2b63220fd6ae8491a0f86708c32fddd1b9 The OpenSSF Package Analysis project identified 'bitboxapp' @ 1.9.0 npm as malicious. It is considered malicious because: - The package...
CVE-2023-42574
Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...
CVE-2023-42574
Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...
