PowerHuntShares - Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a better understand of their SMB Share attack surface and provides data insights t...

Malicious code in hiring-without-whiteboards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c86a6c1ba7eeb700ad39245d9f6e5bd53cee80dcfdd43819e13ea756c0cc3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identity-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a477ee0216ebeb11047cda0982ae2f0316efca62095a3a8d10cd2d5123f36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep_pre_install_v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca672394610755b0d64f939f96ae74c434cdcaf46aeef6040bf12ee470a905a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in si-mfes-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce66f60ce8e0169f64447e31e694ce9b4ff96cc0df232f7fc7c443db576d4d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-850 Malicious code in test-guro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ffa60c52921ed8c52fded56d2ff3c60935dd07f786cdfe7226d4eaf4873c4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phup.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3505fe1eb9dd6b5d7010e73296e7952e76792f78261783958c23ebb1e88f20c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in experience-template-renderer-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afa26f6f8649c313b48cb94b98dd23d01c15d0bc8cce3dfdfa2af4e410b133ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in versions of Apple macOS prior to Ventura 13, which can be exploited by an attacker to record audio using paired AirPods . The following products and versions are affected: m...

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

Malicious code in aries-bifold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251d46e3496d63c9b3598599b630afca002cc225ef387f8b8db2932e544fbc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1088 Malicious code in aries-bifold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251d46e3496d63c9b3598599b630afca002cc225ef387f8b8db2932e544fbc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-ions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0094ac1543c12617313ae835b10879ec07d454e4d60930d6a8bd7589ca9f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9dd5b1dac2fdd321551f9d4217d4383b3205cf183427bb0f1251ca1a7000e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MOXA ARM-Based Computers Elevation of Privilege Vulnerability

MOXA ARM-Based Computers is a series of industrial computers from MOXA in China. An elevation of privilege vulnerability exists in Moxa ARM-Based Computers, which can be exploited by an attacker to gain root privileges...

MOXA ARM-Based Computers 安全漏洞

MOXA ARM-Based Computers is a series of industrial computers from MOXA in China. An elevation of privilege vulnerability exists in Moxa ARM-Based Computers, which can be exploited by an attacker to gain root privileges...

CVE-2022-3088: Execution with Unnecessary Privileges

UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T...

CVE-2022-3088

CVE-2022-3088 concerns an execution with unnecessary privileges vulnerability (CWE-250) in Moxa ARM-based industrial computers. Affected devices include UC-8100A-ME-T, UC-2100, UC-2100-W, UC-3100, UC-5100, UC-8100 (and UC-8100-ME-T), UC-8200, AIG-300, UC-8410A with Debian 9, UC-8580 with Debian 9...

Moxa Multiple ARM-Based Computers

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Moxa Equipment: ARM-Based Computers Vulnerability: Privilege Escalation 2. RISK EVALUATION Successful exploitation of this vulnerability could provide an attacker with root privileges and total control of the system. 3...