Lucene search
+L

3603 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.7 views

Malicious code in catapulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec297590c1fed85e684c74ef8166faf32dc8f3215dba06eebdec5de850ebe863 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/26 7:55 p.m.5 views

Malicious code in flip-flop-flop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dfdd85db7cb2d77621dc123db22d089c24049680bda1b02eb35de7cb4fcba59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.4 views

Malicious code in speedtesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea291fb5f10bb5f4fec190257342afa539f082d724229d3316d408ba2277c5ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.5 views

Malicious code in trova (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b32a84321a61403ac34fd403ba1b065aee99e646ea6d51e4b9f4ebd13d49da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.4 views

Malicious code in speedtestrun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b100bd6200644b48f81811927710a78c261d325facb39b0425c7da01f37d6f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.4 views

Malicious code in trovam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9628972a99fba0ca9548844737900ba400b0bfc698521ab1c307b7cae9464bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/13 12:55 a.m.5 views

Malicious code in prathmeshox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e694050df5023d39169e57ba75c96bff0ad342e5a3336011f10f2c2d730658b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2023/01/12 8:0 a.m.21 views

A Bootiful Podcast: Mario Fusco, the Drools rules engine project lead and fellow Java Champion

Hi, Spring fans! In this episode I talk to Drools lead Mario Fusco @mariofusco about the rules engine Drools and its integrations with Spring, Olivetti computers, and so much more...

3.4AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/12 12:0 a.m.18 views

A Bootiful Podcast: Mario Fusco, the Drools rules engine project lead and fellow Java Champion

Hi, Spring fans! In this episode I talk to Drools lead Mario Fusco @mariofusco about the rules engine Drools and its integrations with Spring, Olivetti computers, and so much more...

3.4AI score
SaveExploits0
Kitploit
Kitploit
added 2023/01/11 11:30 a.m.101 views

PowerHuntShares - Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a better understand of their SMB Share attack surface and provides data insights t...

7.6AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/11 3:51 a.m.5 views

Malicious code in identity-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a477ee0216ebeb11047cda0982ae2f0316efca62095a3a8d10cd2d5123f36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/11 3:51 a.m.8 views

Malicious code in hiring-without-whiteboards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c86a6c1ba7eeb700ad39245d9f6e5bd53cee80dcfdd43819e13ea756c0cc3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 10:56 a.m.5 views

Malicious code in dep_pre_install_v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca672394610755b0d64f939f96ae74c434cdcaf46aeef6040bf12ee470a905a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 4:42 a.m.4 views

Malicious code in si-mfes-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce66f60ce8e0169f64447e31e694ce9b4ff96cc0df232f7fc7c443db576d4d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/09 12:31 a.m.12 views

MAL-2023-850 Malicious code in test-guro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ffa60c52921ed8c52fded56d2ff3c60935dd07f786cdfe7226d4eaf4873c4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/12/29 4:50 a.m.4 views

Malicious code in phup.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3505fe1eb9dd6b5d7010e73296e7952e76792f78261783958c23ebb1e88f20c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/12/19 1:57 a.m.8 views

Malicious code in experience-template-renderer-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afa26f6f8649c313b48cb94b98dd23d01c15d0bc8cce3dfdfa2af4e410b133ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2022/12/15 12:0 a.m.10 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in versions of Apple macOS prior to Ventura 13, which can be exploited by an attacker to record audio using paired AirPods . The following products and versions are affected: m...

5.4CVSS6.7AI score0.00326EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/12/13 2:4 p.m.6 views

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.3AI score0.00952EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/12/13 2:2 p.m.6 views

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

6.8CVSS6.3AI score0.00952EPSS
SaveExploits0References4
Rows per page
Query Builder