Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-643 Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-21019 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: An arbitrary file upload vulnerability in the CommonController.php component allows attackers to execute arbitrary code via a crafted phtml file. This issue is related to the admincCommonController.php...

CVE-2023-28343

creationtimestamp| type| source ---|---|--- 2023-03-14 23:23:21+00:00| seen| https://t.me/cibsecurity/60030 2023-03-21 11:46:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4000 2023-03-23 15:28:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4017 2023-03-25...

CVE-2023-23419

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

CVE-2023-25618

creationtimestamp| type| source ---|---|--- 2023-03-14 12:54:12+00:00| seen| https://t.me/cibsecurity/59953 2025-02-27 15:29:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5686...

CVE-2022-23790

creationtimestamp| type| source ---|---|--- 2023-03-14 12:53:52+00:00| seen| https://t.me/cibsecurity/59938...

Malicious Package

Overview sp-yammer-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview npo-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CVE-2023-27580

creationtimestamp| type| source ---|---|--- 2023-03-13 21:53:28+00:00| seen| https://t.me/cibsecurity/59928...

Malicious Package

Overview ts-infra-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Server-side Request Forgery (SSRF)

Overview Jellyfin.Common is an a Free Software Media System that puts you in control of managing and streaming your media. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network...

CVE-2023-27577

creationtimestamp| type| source ---|---|--- 2023-03-11 00:27:41+00:00| published-proof-of-concept| https://t.me/cibsecurity/59862...

CVE-2023-1246

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3...

Xxe

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3...

CVE-2023-1205

creationtimestamp| type| source ---|---|--- 2023-03-10 20:21:16+00:00| seen| https://t.me/cibsecurity/59808 2025-02-28 16:26:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5910 2025-03-02 11:45:37+00:00| seen| Telegram/vxcN21UbBXgOXIEulgUW7uQiFebqZkbsUixB4PwN3bbmb2O-...

CVE-2022-1386

creationtimestamp| type| source ---|---|--- 2023-03-10 13:47:05+00:00| published-proof-of-concept| https://t.me/DailyToolz/660 2023-03-10 18:42:57+00:00| published-proof-of-concept| https://t.me/DailyToolz/658 2024-01-09 07:23:02+00:00| seen| https://t.me/arpsyndicate/2725 2025-01-26...

CVE-2023-1246 Files or Directories Accessible to External Parties in Saysis Starcities

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3...

SUSE SLED15 / SLES15 Security Update : conmon, libcontainers-common, libseccomp, podman (SUSE-SU-2022:23018-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:23018-1 advisory. - An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink...