163 matches found
MAL-2024-1337 Malicious code in @sxmp/logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae4f22558826d41c2db8d6705d87e6c33f6da3737504e0107814a9853924bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-27091
Name of the Vulnerable Software and Affected Versions TensorFlow's Keras framework versions prior to 2.13 Description A code injection issue in TensorFlow's Keras framework allows attackers to execute arbitrary code with the same permissions as the application. This can be achieved by using a mod...
SUSE CVE-2024-22423
yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using --exec with %q by replacing double quotes with two double quotes. However, this escaping is not sufficient, and still allows expansion of environment...
PT-2024-2642 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 123.0.6312.58 Description: The issue is related to incorrect security UI in Google Chrome, allowing a remote attacker to perform UI spoofing via a crafted HTML page. This can be achieved by exploiting the...
PT-2024-1976 · Vmware · Vmware Esxi +3
Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified VMware Workstation affected versions not specified VMware Fusion affected versions not specified VMware Cloud Foundation affected versions not specified Description: The issue is related to an...
FAUST: A Phobos Ransomware Variant Launches Fileless Attack
Summary: FAUST ransomware, a variant of the Phobos family, exhibiting intricate deployment stages, from decoding Base64 data to injecting shellcode. Notably, it employs a fileless attack through an Office document with a VBA script, emphasizing the need for user caution with document files from...
MAL-2024-424 Malicious code in wlwz-2312-2802 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07245d3507161794aec98c51084187aa8458dc3cc8accca647d49bbe156e8a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-369 Malicious code in wlwz-2312-2201 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d404281dae5127ea282a40c3b360c10be0d12d6c5b4ce2413dc3fe654be3ea72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-220 Malicious code in wlwz-2312-0505 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d6ea70923aa4cebe121f72cfcf7c60997ffee8db87e5f65402ac99e288eda80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-226 Malicious code in wlwz-2312-0602 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3803906062c3060ef288f681d33d9012735681736f1fd8e73e4d99866c572a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-413 Malicious code in wlwz-2312-2700 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e77e00f42383187afc38500aaa8b9072474faab0e4e5a22cbbfc28120592a3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-636 Malicious code in wlwz-2312-5107 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434ac432ab1fcbcecb63885dd0b902e7ca022d1febac020fd6cd3da36e1decf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-14842 · WordPress · Wp Custom Cursors
Name of the Vulnerable Software and Affected Versions: The WP Custom Cursors | WordPress Cursor Plugin versions through 3.2 Description: The issue allows high privilege users, such as admin, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, fo...
A New Face of AsyncRAT Utilizes WSF Scripts to Spread
Summary: AsyncRAT is a remote access trojan RAT malware known for stealing credentials and executing various malicious activities since 2019. Its recent variant, distributed through WSF script files, employs sophisticated fileless techniques, emphasizing the importance of user caution and robust...
MAL-2023-8621 Malicious code in vivo-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-46121 Generic Extractor MITM Vulnerability in yt-dlp
yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie...
PYSEC-2023-195
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
Exploit for Improper Access Control in Citrix Sharefile_Storage_Zones_Controller
CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It need...
How to auto launch published app while logon Storefront Web URL
This article describes how to enable and customize "auto launch published app" feature from Storefront server. Caution! Citrix does not support or assist with this customized configuration. Perform this modification at your own risk. If you do proceed, make sure to always take a backup before...