14446 matches found
Malicious code in discordwebutils1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 452374f38af0c10a3f6a1685be6c9360de86f61dd65604fb6fbd5a7c55455e5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8407 Malicious code in hydradx-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0abec8f2cef143387e4657c22d48e41efac43c4f4d8c40ea5712f19d7d7f9270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Redefining the StripedFly Malware Framework
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary An intricate cross-platform malware framework, known as StripedFly, operated discreetly for five years, surreptitiously compromising over a million Windows and Linux systems. It skillfully evaded in-dept...
Malicious code in eslint-plugin-blade (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-34833
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component...
CVE-2022-34833
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component...
CVE-2022-34832
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component...
CVE-2022-34832
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component...
CVE-2022-34833
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component...
CVE-2022-34832
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component...
Cross site scripting
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component...
Design/Logic Flaw
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component...
Malicious code in fuzzer-gui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b32a7fd36a831bd074988f7054a6dca65651d07aafc8d97dc75c6f907a59895 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fadam-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e81c60df4cba570ba561c45c4e1f48fe798f16078ef1a7c2c601cdb3edf1f7 The OpenSSF Package Analysis project identified 'fadam-frontend' @ 101.0.0 npm as malicious. It is considered malicious because: - The package...
How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime
This report explores the Kopeechka service and gives a detailed technical analysis of the service’s features and capabilities and how it can help cybercriminals to achieve their goals...
PT-2023-13422 · Vermeg · Vermeg Agilereporter
Name of the Vulnerable Software and Affected Versions: VERMEG AgileReporter version 21.3 Description: An issue was discovered in the Analysis component, allowing an admin to enter an XSS payload. Recommendations: For VERMEG AgileReporter version 21.3, consider restricting access to the Analysis...
VERMEG Agile Reporter Security Breach
VERMEG Agile Reporter is a hybrid of pre-packaged modules from VERMEG. A security vulnerability exists in VERMEG Agile Reporter version 21.3, which stems from an XML document via the Analysis component that can cause XML External Entity Injection XXE...
VERMEG Agile Reporter Security Breach
VERMEG Agile Reporter is a hybrid of pre-packaged modules from VERMEG, Inc. A security vulnerability exists in VERMEG Agile Reporter version 21.3 that originates from an administrator being able to inject cross-site scripting XSS into the Analysis component...
The vulnerability of the “//line” directive in the Go programming language allows a violator to execute arbitrary code.
The vulnerability of the “//line” directive in the Go programming language is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
