MAL-2023-704 Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-889 Malicious code in ticket-parser2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee92fd5b97c5234a0a301b915037b0f7285c820216158c9bef86dc7c08e16661 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-994 Malicious code in yandex-yt-transfer-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e8ad10f31088a063adf3ff93799c1850d56418c603e0af2e811977873b7ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware Attack on CircleCI Engineer's Laptop Leads to Recent Security Incident

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee's laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company's systems and data last month. The CI/CD service CircleCI said the "sophisticated...

OESA-2023-1033 byacc security update

Berkeley Yacc is an LALR1 parser generator. Berkeley Yacc has been made as compatible as possible with AT&T Yacc. Berkeley Yacc can accept any input specification that conforms to the AT&T Yacc documentation. Specifications that take advantage of undocumented features of AT&T Yacc will probably b...

MAL-2023-242 Malicious code in dependancy_confusion_test_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73729039e4d85fe520736702b47a1c7279bbcc907a4d902a3ca114a800afc943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-48 Malicious code in @playgami/eslint-config-portal-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59a96f0bdbc11422cdba0cabcb9398d163b3732d5d14f173849e14273bc717e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MacGeiger 注入漏洞

MacGeiger is a WIFI AP locator utility by rofl0r individual developers. MacGeiger suffers from an injection vulnerability that originates in the function dumpwlanat in the file macgeiger. c that can lead to injection...

PT-2023-10613 · Unknown · Rofl0R Macgeiger

Name of the Vulnerable Software and Affected Versions: rofl0r MacGeiger affected versions not specified Description: A problematic vulnerability has been found in rofl0r MacGeiger, affecting the dump wlan at function of the macgeiger.c file in the ESSID Handler component. The manipulation leads t...

MAL-2022-5864 Malicious code in rum-speedindex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49eadf01782e0a434253a00c6ff87b88dea1bd449bcac0a138c573fae1e059c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

forschung.boku.ac.at Cross Site Scripting vulnerability OBB-3103315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-6662 Malicious code in tsconfig-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08dd3fd9f05003ef6ca4f61ed5a23a69fd09a1c7cd9973f6d2caaa673066c803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

it2.at Cross Site Scripting vulnerability OBB-3095611

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

haizingergasse9.at Cross Site Scripting vulnerability OBB-3095539

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

neusiedl24.at Cross Site Scripting vulnerability OBB-3092687

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chip-24.at Cross Site Scripting vulnerability OBB-3092194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-698 Malicious code in @upc2web/font-firasans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423efc92507f29817b2c44c28e7b4f0a3b38b11903bc525369486a8f69a0b28a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31687

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...

CVE-2022-31685

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...