180 matches found
Code injection
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2017-16044
CVE-2017-16044 corresponds to the npm package d3.js , reported as a malware module that hijacks environment variables and exfiltrates them to attacker-controlled endpoints. The community advisories (GHSA, npm advisory) state that all versions have been unpublished from the npm registry. The root ...
CVE-2017-16044
d3.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...
CVE-2018-11220
CVE-2018-11220 affects Bitmain Antminer D3, L3+, and S9 devices. The vulnerability enables remote command execution through the device’s system restore/recovery functionality, allowing an attacker with or without authentication (depending on context) to trigger arbitrary commands on the device. C...
Hijacked Environment Variables
Overview The d3.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
How to Combine D3 with AngularJS
The Benefits and Challenges of D3 Angular Combination Today we'll be focusing on how to combine D3 with the AngularJS framework. As we all know, Angular and D3 frameworks are very popular, and once they work together they can be very powerful and helpful when creating dashboards. But, they can al...
D3 GO - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application D3 GO published at the 'play' market has multiple vulnerabilities...
SedSystems D3 Decimator - Multiple Vulnerabilities
Exploit for multiple platform in category web applications SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to...
OSINT Gathering Tool: Inquisitor
OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...
Wp-D3 <= 2.4 - Cross-Site Request Forgery (CSRF)
The Wp-D3 WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
SedSystems D3 Decimator - Multiple Vulnerabilities
SedSystems D3 Decimator - Multiple Vulnerabilities SedSystems D3 Decimator Multiple Vulnerabilities ================================================ Identification of the vulnerable device can be performed by scanning for TCP port 9784 which offers a default remote API. When connected to this...
Python Network Recon Framework: ivre
IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including two modules for passive recon one p0f -based and one Bro -based and one module for active recon mostly Nmap -based, with a bit of ZMap . External programs /...
Joomla Component com_K2 -q 1.0.1b (category) SQL Injection Vuln
No description provided by source. ---------------------------------------------------------------------- Joomla Component comk2 sectionid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com...
D-Link DIR-615 Hardware rev D3 / DIR-300 - Hardware rev A - Multiple Vulnerabilities
No description provided by source...
Joomla Module Camp26 Visitor Data 1.1 - Remote code Execution
No description provided by source. Joomla Module Camp26 Visitor Data 1.1 Remote code Execution ============================================================ - Discovered by : Chip D3 Bi0s - Email : [email protected] - Date : 2010-04-28 - Severity : 9/10 CVSS scored -----------------------------...
A Cool Debate 1.0.3 Component Joomla Local File Inclusion
No description provided by source. A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 -...
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 2010-09-10 - Where : From Remote...
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam -...
Joomla Component (com_jphone) Local File Inclusion Vulnerability
Exploit for php platform in category web applications ================================================================ Joomla Component comjphone Local File Inclusion Vulnerability ================================================================ - Discovered by : Chip D3 Bi0s - Email :...
Joomla JE FAQ Pro Blind SQL Injection
--------------------------------------------------------------------------------- Joomla Component JE FAQ Pro : Multiple Remote Blind Sql Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...