244 matches found
PT-2024-40916 · Unknown · Alloy-Json-Abi
Name of the Vulnerable Software and Affected Versions: alloy-json-abi versions prior to the version containing commit 4790c47 Description: The issue arises from improper handling of malformatted JSON ABI strings by the alloy-json-abi crate. Specifically, the JsonAbi::parse method can be exploited...
Malicious code in alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9499 Malicious code in alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @tauh33dkhan/alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1746 Malicious code in @tauh33dkhan/alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-40068 · Ez Systems +2 · Ez Platform +5
Name of the Vulnerable Software and Affected Versions: eZ Platform versions 1.13.x through 3.1.2 eZ Platform EE versions 2.5.13 through 3.1.2 CKEditor versions prior to 4.14 AlloyEditor versions prior to 2.11.9 Description: There are two security issues of low to medium severity. The first issue ...
MAL-2024-1280 Malicious code in @symplr-ux/alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17b660a440d2cb884c99312341fc58bf33cac16bb05ecf3065ab4f40c073c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @symplr-ux/alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17b660a440d2cb884c99312341fc58bf33cac16bb05ecf3065ab4f40c073c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government
An unnamed Southeast Asian government has been targeted by multiple China-nexus threat actors as part of espionage campaigns targeting the region over extended periods of time. "While this activity occurred around the same time and in some instances even simultaneously on the same victims'...
New PingPull Malware Variant Targets Linux Systems
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The PingPull malware variant that targets Linux systems is linked to Alloy Taurus, and it communicates with a domain over HTTPS to receive encrypted commands for executing specific functions. To receive...
Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks
The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as well as a new undocumented tool codenamed Sword2033. That's according to findings from Palo Alto Networks Unit 42, which discovered recent malicious cyber activity carried out by the group...
Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks
The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as well as a new undocumented tool codenamed Sword2033. That's according to findings from Palo Alto Networks Unit 42, which discovered recent malicious cyber activity carried out by the group...
alloy-asia.com Cross Site Scripting vulnerability OBB-2436259
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
alloywheelsindia.com XSS vulnerability
Open Bug Bounty ID: OBB-707192 Description| Value ---|--- Affected Website:| alloywheelsindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
pandahall.com XSS vulnerability
Vulnerable URL: http://www.pandahall.com/p-1037365-tibetan-style-alloy-pendant-cabochon-settings-heart-with-rose-antique-silver.html?paLb="%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS...
New MIT Scanner Finds Web App Flaws in a Minute
A new web application security scanner, developed by a former MIT student now Berkeley postdoctoral researcher, could be a real find for developers wishing to lock down bugs that live outside the OWASP top 10. The static-analysis tool is called Space and will be unveiled at the upcoming...
Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)
A stack buffer overflow vulnerability has been reported in Light Alloy media player. The vulnerability is due to a lack of boundary check when handling M3U files. Successful exploitation could allow arbitrary code execution in the context of the target user...
CVE-2013-6874
Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...
Stack overflow
Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file...
CVE-2013-6874
CVE-2013-6874: A stack-based buffer overflow in Vortex Light Alloy prior to 4.7.4 allows remote attackers to execute arbitrary code via a long URL in an .m3u file. Affected: Vortex Light Alloy,