CVE-2022-2147 Unquoted Service Path in Cloudflare WARP for Windows

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0...

Malicious Package

Overview launchdarkly-cloudflare-worker-template is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Cloudflare Warp 代码问题漏洞

Cloudflare Warp Cloudflare Vpn is a client application for secure connections from the American company Cloudflare. A security vulnerability exists in Cloudflare Warp for Windows version 2022.2.95.0. An attacker could exploit the vulnerability to execute arbitrary code leading to elevation of...

Malicious code in eurid_cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 221d668aadab8ae1b1b3645fce4b4034d75dafda20957f51745af327ace0617e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matomo-analytics-cloudflare-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379cfcf198b8b35c36cafb16790478cac75d84f6f4c52217add6893135f41d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4496 Malicious code in matomo-analytics-cloudflare-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379cfcf198b8b35c36cafb16790478cac75d84f6f4c52217add6893135f41d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-docs-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab02f1a2c82a631dc786a2035d2e1d3f21075780099412aa34aa7349de70557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 908520a9518631f583d13833775c371f01544eaacb80c3d2879f9491fb0547eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4261 Malicious code in launchdarkly-cloudflare-worker-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de576cf63a8f34f8fc17ce760973d6f5164d2bd3ddac3fe040cd53568d5ca332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1934 Malicious code in cloudflare-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 908520a9518631f583d13833775c371f01544eaacb80c3d2879f9491fb0547eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchdarkly-cloudflare-worker-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de576cf63a8f34f8fc17ce760973d6f5164d2bd3ddac3fe040cd53568d5ca332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1935 Malicious code in cloudflare-docs-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab02f1a2c82a631dc786a2035d2e1d3f21075780099412aa34aa7349de70557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cloudflare Public Bug Bounty: I found another way to bypass Cloudflare Warp lock!

It was possible to bypass Lock WARP switch feature on WARP iOS mobile client by enabling both "Disable for cellular networks" and "Disable for Wi-Fi networks" switches at once in the application settings. Such configuration caused WARP client to disconnect and allowed the user to bypass...

Cloudflare Thwarted Largest Ever HTTPS DDoS Attack

By Deeba Ahmed The DDoS attack originated from 121 countries and was powered by a small botnet of only 5,067 hacked… This is a post from HackRead.com Read the original post: Cloudflare Thwarted Largest Ever HTTPS DDoS Attack...

Record breaking HTTPS DDoS attack

Last week, Cloudflare blocked the largest HTTPS DDoS attack on record. The attack amassed some 26 million requests per second rps. The previous record for a HTTPS DDoS attack was 15.3 million rps. The attack targeted an unnamed Cloudflare customer and originated mostly from Cloud Service Provider...

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second RPS distributed denial-of-service DDoS attack last week, making it the largest HTTPS DDoS attack detected to date. The web performance and security company said the attack was directed...

confluencePot - Simple Honeypot For Atlassian Confluence (CVE-2022-26134)

ConfluencePot is a simple honeypot for the Atlassian Confluence unauthenticated and remote OGNL injection vulnerability CVE-2022-26134. About the vulnerability You can find the official advisory by Atlassian to this vulerability here. For details about the inner workings and exploits in the wild...

Cloudflare Public Bug Bounty: Sign in with Apple generates long-life JWTs, seemingly irrevocable, that grant immediate access to accounts

The OIDC JWT token issued on a new Sign in with Apple ID to the Cloudflare Dashboard had an excessive lifetime. When intercepted by a malicious actor, it enabled impersonation of the affected user on multiple devices during the entire token validity period without the need to re-authenticate. The...

Cloudflare Public Bug Bounty: Sign in with Apple works on existing accounts, bypasses 2FA

It was possible to bypass configured Cloudflare 2FA when logging in to a Cloudflare account using Apple ID authentication flow. A malicious actor could access a Cloudflare account by setting up an Apple ID account using e-mail address matching the one used to set up the targeted account. The issu...

Exodus: 2 Cache Poisoning Attack Methods Affect Core Functionality www.exodus.com

Summary: www.exodus.com hosts static js and css files on Server: cloudflare . Which is cached by cloudflare and passed to all other users accessing the source. I was able to impact the core functionality by using a custom HTTP. Here are 2 details of the Bug. Steps To Reproduce: 1. 501 Not...