MAL-2022-1098 Malicious code in arm-attestation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ca3369e2fafc9c53e0e29146ebd4d60493a8765224a59c81a07a4f3af6e0b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zuanshi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63254b223cbeaba40946dd0cc604245529ff5b147026f6c49ec973877507c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-940 Malicious code in alimaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d481848faa4833bf11ea9a51708d0021a724f1132e8bb190a94c2c28c0147397 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-6822

Name of the Vulnerable Software and Affected Versions RARLAB WinRAR versions prior to 6.23 Description An issue exists in the processing of recovery volumes due to improper validation of an array index. This lack of proper validation of user-supplied data can lead to memory access past the end of...

Reconky - A Great Content Discovery Bash Script For Bug Bounty Hunters Which Automate Lot Of Task And Organized It

Reconky is a script written in bash to automate the task of recon and information gathering.This Bash Script allows you to collect some information that will help you identify what to do next and where to look for the required target. Usage ./reconky.sh Main-Features It will Gathers Subdomains wi...

How to Find the Hidden Files on Your Phone or Computer

You shouldn't mess with some of them—but there are others you should be aware of...

PT-2021-24353 · Amazon Web Services · Aws Encryption Sdk For Java

Name of the Vulnerable Software and Affected Versions: AWS Encryption SDK for Java versions 2.0.0 through 2.2.0 AWS Encryption SDK for Java versions less than 1.9.0 Description: The issue concerns the incorrect validation of some invalid ECDSA signatures. This affects the integrity of the...

CVE-2020-28466

CVE-2020-28466 affects the nats-server component at github.com/nats-io/nats-server/server. The issue arises from an export/import cycle between accounts that untrusted users can trigger, causing the server to crash (denial of service) by consuming CPU/memory. Connected advisories indicate the 2.x...

How Covid fatigue puts your physical and digital health in jeopardy

After six months of social distancing, sheltering in place, working from home, distance learning, mask-wearing, hand-washing, and plenty of hand-wringing, people are pretty damn tired of COVID-19. And with no magic bullet yet and no end in sight, annoyance has turned into exasperation and even...

Malicious Package in arsenic-tabasco-cyborg-peanut-butter

All versions of arsenic-tabasco-cyborg-peanut-butter contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

GHSA-GFM8-G3VM-53JH Malicious Package in leetlog

Versions 0.1.2 and 0.1.3 of leetlog contain malicious code. The package adds an arbitrary hardcoded SSH key identified as hacker@evilmachine to the system's authorizedkeys Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets an...

"Description cannot be found" error in event logs in Event Viewer in Windows Server 2012 R2 or Windows Server 2012

"Description cannot be found" error in event logs in Event Viewer in Windows Server 2012 R2 or Windows Server 2012 Introduction This article describes an issue in which the "Description cannot be found" error message is displayed in the event logs in Windows 8.1, Windows RT 8.1, Windows Server 20...

Updated tomcat packages fix security vulnerabilities

When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user...

Microsoft SharePoint CVE-2019-1296 Remote Code Execution Vulnerability

Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsof...

GHSA-JJ6G-7J8P-7GF2 Cross-Site Scripting in bracket-template

All versions of bracket-template are vulnerable to stored cross-site scripting XSS. This is exploitable when a variable passed in via a GET parameter is used in a template. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this...

5 Cybersecurity Tips You Need To Know

1. Passwords Passwords should be thought of more as “pass-phrases.” They should be at least 16 characters long, contain uppercase & lowercase letters, numbers, and symbols. Furthermore, you should update your passwords at least every 6 months—although every 90 days is recommended. Additionally,...

Microsoft Internet Explorer Scripting Engine CVE-2019-0918 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet...

SUSE-SU-2019:13977-1 Security update for python-numpy

This update for python-numpy fixes the following issues: Security issue fixed: - CVE-2019-6446: Set allowpickle to false by default to restrict loading untrusted content bsc1122208. With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by misusing...

Microsoft Internet Explorer CVE-2019-0676 Information Disclosure Vulnerability

Description Microsoft Internet Explorer are prone to an information-disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successful exploits will allow attackers to obtain sensitive information that may aid in further...

Microsoft Azure IoT Java SDK CVE-2019-0729 Remote Privilege Escalation Vulnerability

Description Microsoft Azure IoT Java SDK is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...