72 matches found
MAL-2022-4252 Malicious code in lamalama (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad038d1be0dceb61216de89927133805a4bd57aaf1b6a111891e8518fecbc2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-439 Malicious code in @msmg/tracking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a121f4238105fd6fe7dcd1dc99a15348b5120d3fcbdabfa65cd741f1d9fb0100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4714 Malicious code in mrg-xray (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26e09ea7ab8ed8a407f8c2b8607e12ffc1700fb17af9e9013887864faf934f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-129 Malicious code in @bmw-chris/ecufunction-default-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47870f755a8d87be1f159dfa2fec23c5c8fa0285c556d88248c664d190b2be0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6195 Malicious code in snyk-resolve-dep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4aee3d2a4454c7a1edc1eb75aa97b985eb7a29056b115d2556bf743099ab559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
sgxwallet buffer overflow vulnerability
Sgxwallet is an open source high-performance hardware-secure cryptographic wallet based on Intel Sgx technology. SKALE sgxwallet suffers from a buffer overflow vulnerability that can be exploited by attackers to cause segment errors and compromised security zones...
CVE-2019-2789
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Malicious Package
Overview Version 1.8.4 of bowee contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and ke...
Lenovo to pay $7.3m for installing adware in 750,000 laptops
By Waqas In 2015, Beijing based laptop manufacturer and seemingly reliable technology company Lenovo made headlines that its 750,000 laptops had pre-installed adware called VisualDiscovery developed by Superfish. The adware played a vital role in compromising online security protections installed...
Gondad Exploit Kit Landing Page
Gondad exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Gondad exploit kit by enticing them to visit a malicious web page. Successful infection will compromise the security of all data on the victim's...
Oracle website vulnerable to SQL injection
Oracle website vulnerable to SQL injection vulnerability Oracle database website itself vulnerable to SQL injection attack. The website having a loophole by which any attacker can easily hack into it. The vulnerability is found and submitted by Hacker "m@m@ ". Oracle provides the world's most...
