Lucene search
+L

3604 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.4 views

Malicious code in @juiggitea/laborum-dolorum-quisquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2919862e88d65f2eb97a172024290e3091e06e204233056a4a56d77ddd131f2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.5 views

Malicious code in @juiggitea/magni-iure-excepturi-nisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aa8f85f625d111c2c727ee5ae8f18b7724728cbf5bd1d6ee16ad6cdc7b64254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:53 p.m.5 views

Malicious code in @juiggitea/laboriosam-eligendi-consequuntur-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1b1be241ce4fb018ce6914c0b57fa934a94147033a8c727b528dc6df1ab8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:43 p.m.6 views

Malicious code in @juiggitea/esse-odio-possimus-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1845f9d42c3165c597eb1f29bc80dceef9f0447b71aa084cf8efb8b2ebcc69b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:43 p.m.5 views

Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 6:43 p.m.4 views

Malicious code in @juiggitea/error-et-veritatis-sequi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bc8b0c0ad5b68a2aebd9218dc1a86fddccddff5c7fd2bc58abfde2e4e7c344e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/03 2:16 a.m.4 views

Malicious code in djs-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a58c6bac1a5d6e47842d8e27e606c713ed2da48e715d58a34cbcaebfc1293e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/02 2:6 a.m.4 views

Malicious code in stablecoin-evm (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

7AI score
SaveExploits0References1
Securelist
Securelist
added 2024/05/27 10:0 a.m.37 views

Threat landscape for industrial automation systems, Q1 2024

Global statistics Statistics across all threats In the first quarter of 2024, the percentage of ICS computers on which malicious objects were blocked decreased by 0.3 pp from the previous quarter to 24.4%. Compared to the first quarter of 2023, the percentage decreased by 1.3 pp. Percentage of IC...

7.5AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2024/05/25 10:30 a.m.17 views

Microsoft’s New Recall AI Tool May Be a ‘Privacy Nightmare’

Plus: US surveillance reportedly targets pro-Palestinian protesters, the FBI arrests a man for AI-generated CSAM, and stalkerware targets hotel computers...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.10 views

The vulnerability of UEFI (BIOS) microprogramming software in Huawei personal computers allows a hacker to execute arbitrary code.

The vulnerability of UEFI BIOS in Huawei personal computers is related to the execution of operations outside the buffer in SMRAM. Exploiting this vulnerability allows an attacker to execute arbitrary code in System Management Mode SMM...

7.8CVSS6.4AI score0.0013EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.9 views

The vulnerability of UEFI (BIOS) microprogramming software in Huawei personal computers allows a hacker to execute arbitrary code.

The vulnerability of UEFI BIOS in Huawei personal computers is related to insufficient checking of exception states. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.8 views

The vulnerability of UEFI (BIOS) in Huawei personal computers allows a hacker to gain unauthorized access to arbitrary functions.

The vulnerability of UEFI BIOS in Huawei’s personal computers is related to improper access control. Exploiting this vulnerability can allow a hacker to gain unauthorized access to arbitrary functions...

7.8CVSS5.6AI score0.00115EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2024/05/16 12:30 p.m.64 views

Invoke-SessionHunter - Retrieve And Display Information About Active User Sessions On Remote Computers (No Admin Privileges Required)

Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs associated with active...

6.9AI score
SaveExploits0References2
OSV
OSV
added 2024/05/14 3:13 p.m.6 views

CVE-2024-27825

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences...

7.1CVSS7.2AI score0.00192EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/05/08 2:9 a.m.6 views

Malicious code in sc-chimer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f470aa8655a172b4c57dcceec010741d839640839045d16030fc0b1e0728722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.11 views

PT-2024-18230 · Hewlett Packard · Hp Application Enabling Software Driver

Name of the Vulnerable Software and Affected Versions: HP Application Enabling Software Driver affected versions not specified Description: A potential security issue has been identified in the HP Application Enabling Software Driver for certain HP PC products, which might allow escalation of...

5.7CVSS7.3AI score0.00153EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.14 views

PT-2024-20388 · Zoho · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADManager Plus versions 7203 and prior Description: The issue is related to a Privilege Escalation vulnerability in the Modify Computers option. This vulnerability allows for improper privilege management, which can lead...

8.8CVSS7AI score0.04378EPSS
SaveExploits1References13
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/04/22 8:2 a.m.4 views

Malicious code in shard-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5e6f0820c8729977d62b9cc34c7461719fd4056fc5e8e9f44426ad3c1f60d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/04/22 6:10 a.m.6 views

Malicious code in blockchain-explorer-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdabf6ac5434305cb152ee0eaf4d9cbac6f1de324ae91052537dc8fcfa94410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder