Lucene search
K

1081 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/24 6:50 p.m.5 views

Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/11/24 6:50 p.m.14 views

MAL-2023-8607 Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
Exploits0References1
The Hacker News
The Hacker News
added 2023/11/23 2:46 p.m.64 views

Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

A new phishing attack has been observed leveraging a Russian-language Microsoft Word document to deliver malware capable of harvesting sensitive information from compromised Windows hosts. The activity has been attributed to a threat actor called Konni, which is assessed to share overlaps with a...

7.8CVSS7.2AI score0.97798EPSS
Exploits49
HackRead
HackRead
added 2023/11/21 3:51 p.m.19 views

Konni RAT Exploiting Word Docs to Steal Data from Windows

By Deeba Ahmed Konni RAT is back! This is a post from HackRead.com Read the original post: Konni RAT Exploiting Word Docs to Steal Data from Windows...

7.4AI score
Exploits0
NVD
NVD
added 2023/11/18 11:15 p.m.21 views

CVE-2023-25985

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

8.8CVSS0.00341EPSS
Exploits0References1
Prion
Prion
added 2023/11/18 11:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

6.8CVSS7.2AI score0.00341EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/18 10:21 p.m.35 views

CVE-2023-25985 WordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5...

4.3CVSS8.9AI score0.00341EPSS
Exploits0References1
Code423n4
Code423n4
added 2023/11/15 12:0 a.m.41 views

Funds cannot be withdrawn from EigenLayer

Lines of code Vulnerability details Impact NodeDelegator contracts handle depositing LSTs into EigenLayer to earn yield. However the contract lacks functions to withdraw those tokens afterwards, meaning they will become trapped in the EigenLayer protocol. This breaks the functionality of the...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/11 11:22 p.m.4 views

Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2023/11/11 11:22 p.m.24 views

MAL-2023-8508 Malicious code in zoo-web-components-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.2 views

PT-2023-22108 · Google · Google Docs

Name of the Vulnerable Software and Affected Versions: Google Docs versions prior to the fixed version Description: The issue allows documents operations to be manipulated to contain invalid data types, possibly script code. This could lead to script code injection into an operation that would be...

5.4CVSS5.7AI score0.00383EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/10/21 12:0 a.m.48 views

AlmaLinux 9 : varnish (ALSA-2023:5924)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:5924 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild ...

7.5CVSS7.2AI score0.99999EPSS
Exploits19References2
Hacker One
Hacker One
added 2023/09/25 7:8 p.m.32 views

HackerOne: Google Docs link in JS files allows editing & reading survey information

A Google Docs link was discovered in JavaScript files on a website allowing editing and reading of survey information. The link provided access to edit a survey and view some users' emails and responses...

6.9AI score
Exploits0
OpenVAS
OpenVAS
added 2023/09/16 12:0 a.m.7 views

Fedora: Security Advisory for python3-docs (FEDORA-2023-aeb32a843f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/15 12:0 a.m.10 views

Fedora 37 : python3-docs / python3.11 (2023-aeb32a843f)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-aeb32a843f advisory. Update to 3.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

5.6AI score
Exploits0References1
OpenVAS
OpenVAS
added 2023/09/13 12:0 a.m.8 views

Fedora: Security Advisory for python3-docs (FEDORA-2023-3d13b093d2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2023/09/11 1:17 a.m.13 views

[SECURITY] Fedora 38 Update: python3-docs-3.11.5-1.fc38

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/09/11 12:0 a.m.9 views

Fedora 38 : python3-docs / python3.11 (2023-3d13b093d2)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-3d13b093d2 advisory. Update to 3.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

5.6AI score
Exploits0References1
Fedora
Fedora
added 2023/09/07 1:29 a.m.12 views

[SECURITY] Fedora 38 Update: python3.10-3.10.13-1.fc38

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.7 views

Oracle Linux 7 : realmd (ELSA-2015-2184)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2184 advisory. 0.16.1-5 - Revert 0.16.1-4 - Use samba by default - Resolves: rhbz1271618 0.16.1-4 - Fix regressions in 0.16.x releases - Resolves: rhbz1258745 - Resolves:...

5CVSS5.7AI score0.02915EPSS
Exploits0References2
Rows per page
Query Builder