Lucene search
K

3448 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/16 6:7 a.m.3 views

Malicious code in fca-kemdino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 608940f627c10d20f4b58a3eed9bbeba065cd554e66305b171feb7311c5b1504 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/12 11:21 p.m.4 views

Malicious code in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7024e3e37cd20e39f30c363c32d2da667b32231695491e01709a7ed3fad3a09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.3 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent allows attackers to gain unauthorized access to protected information.

Acronis Agent’s backup and recovery software for computers and servers involves exposing protected information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.3AI score0.0017EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.7 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in errors during link processing, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS6.1AI score0.00251EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.3 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS5.9AI score0.00157EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.4 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00201EPSS
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/04 6:13 p.m.3 views

Malicious code in bank_cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70064e0fa01accdeb5e78c99cf3b86d47cff2ad6e3bec52c9e45091e600bc5fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/03 1:21 a.m.2 views

Malicious code in @badolkhan420/fca-badol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436ac692985a2fae4a79ec7010810f6a2b4d617ea932fab96f222989b578f74b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/10/03 1:15 a.m.3 views

Malicious code in meta-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a73a2b61674138aaa5e5aad870296f68427a507164b679a24fbb061518fda8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/26 4:39 a.m.3 views

Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
CNNVD
CNNVD
added 2023/09/26 12:0 a.m.4 views

Apple macOS Security Breach

Apple macOS is a dedicated operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access calendar data saved to a temporary directory...

3.3CVSS6.5AI score0.00242EPSS
Exploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/25 4:59 a.m.2 views

Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/25 4:59 a.m.2 views

Malicious code in facebook-asuna-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2596e9dc89e4123b4f9e19dd355b77bb6fd9490a73d6e457daded1ec3ff8b89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/21 1:42 a.m.4 views

Malicious code in @zettle-bo/inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6262bbe576936f351b23ae859a7a6109329ac53866ece0189c1a9feee444159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/09/20 3:15 p.m.2 views

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.5AI score0.00952EPSS
Exploits0References13
NVD
NVD
added 2023/09/20 3:15 p.m.37 views

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS7.9AI score0.00952EPSS
Exploits0References12
Vulnrichment
Vulnrichment
added 2023/09/20 2:28 p.m.19 views

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.6AI score0.00952EPSS
Exploits0References12
Cvelist
Cvelist
added 2023/09/20 2:28 p.m.53 views

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS7AI score0.00952EPSS
Exploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/19 4:52 a.m.4 views

Malicious code in beta-fhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/19 4:50 a.m.3 views

Malicious code in fca-chana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37e708fb080fb543bd5fca9f8e273bf71bd0fb1744e3026ea3e491a298cf8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder