Lucene search
+L

75 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 6:33 a.m.•10 views

Malicious code in client-req-bans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b540646327a4a8326c496059737e3bb81af664a3c51951c1a4caeb0e265496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/11/07 6:33 a.m.•1 views

Malware in client-req-bans

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•19 views

SourceBans++ 安全漏洞

SourceBans++ is a global administration, banning and communication management system for the Source engine by the SourceBans++ Dev team. A security vulnerability exists in SourceBans++ versions prior to v.1.8.0. A remote attacker can exploit this vulnerability to obtain sensitive information via ...

7.5CVSS6.4AI score0.00469EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/30 3:35 a.m.•7 views

Malicious code in req-bans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/10/30 3:35 a.m.•1 views

Malware in req-bans

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/10/30 3:35 a.m.•11 views

MAL-2024-10278 Malicious code in req-bans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Wired Threat Level
Wired Threat Level
•added 2024/07/01 10:30 a.m.•15 views

The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

While Kaspersky and TikTok make very different kinds of software, the US has targeted both over national security concerns. But the looming bans have larger implications for internet freedom...

7.5AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2023/11/28 11:00 a.m.•25 views

Telegram’s Bans on Extremist Channels Aren't Really Bans

A WIRED analysis of more than 100 restricted channels shows these communities remain active, and content shared within them often spreads to channels accessible to the public...

7.3AI score
SaveExploits0
HackRead
HackRead
•added 2023/03/03 11:03 p.m.•27 views

Russia Bans WhatsApp, Discord, Telegram, and Others

By Deeba Ahmed Interestingly, Telegram is also part of this ban, although it is owned by Russian millionaire Pavel Durov. This is a post from HackRead.com Read the original post: Russia Bans WhatsApp, Discord, Telegram, and Others...

3.4AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2023/02/27 2:00 a.m.•28 views

TikTok probed over child privacy practices

The privacy protection authorities for Canada, Quebec, British Columbia, and Alberta have announced they will start an investigation into TikTok's privacy practices, especially in relation to its younger users. The investigation will include whether the company obtained valid and meaningful conse...

0.6AI score
SaveExploits0
NVD
NVD
•added 2022/12/16 1:15 p.m.•27 views

CVE-2022-41961

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4.3CVSS0.00293EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/16 1:15 p.m.•32 views

Code injection

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4CVSS4.5AI score0.00293EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/16 12:24 p.m.•12 views

CVE-2022-41961 BigBlueButton subject to Ineffective user bans

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4.3CVSS4.5AI score0.00293EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/16 12:24 p.m.•35 views

CVE-2022-41961 BigBlueButton subject to Ineffective user bans

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4.3CVSS4.7AI score0.00293EPSS
SaveExploits0References3
Mend
Mend
•added 2022/12/16 12:24 p.m.•2 views

CVE-2022-41961

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

5.3CVSS0.00293EPSS
SaveExploits0References5
OSV
OSV
•added 2022/12/16 12:24 p.m.•34 views

CVE-2022-41961 BigBlueButton subject to Ineffective user bans

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4.3CVSS4.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•6 views

CVE-2022-41961: Origin Validation Error

BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are subject to Ineffective user bans. The attacker could register multiple users, and join the meeting with one of them. When that user is banned, they could still join the meeting with the remaining registered...

4.3CVSS5.8AI score0.00293EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/16 12:00 a.m.•4 views

PT-2022-26185

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.4-rc-6 Description The issue concerns ineffective user bans in BigBlueButton, an open source web conferencing system. An attacker could register multiple users and join a meeting with one of them. If that user...

4.3CVSS0.00293EPSS
SaveExploits0References8
Wired Threat Level
Wired Threat Level
•added 2022/05/21 1:00 p.m.•23 views

North Korean IT Workers Are Infiltrating Tech Companies

Plus: The Conti ransomware gang shuts down, Canada bans Huawei and ZTE, and more of the week’s top security news...

2AI score
SaveExploits0
OSV
OSV
•added 2022/05/02 4:15 p.m.•26 views

CVE-2022-0191

The Ad Invalid Click Protector AICP WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans...

6.5CVSS5.9AI score0.00582EPSS
SaveExploits2References2
Rows per page
Query Builder