MAL-2022-2582 Malicious code in dpd-returns-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ef9bb6d12034b7105aa8e0bfc2ade917b80d7c6fa5f5aaa625cedbe7e3c3dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2581 Malicious code in dpd-cnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7d6a1334c371170cf7af7116db9cebbbde32ccdde72437b7e919a9675610c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dpd-cnf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7d6a1334c371170cf7af7116db9cebbbde32ccdde72437b7e919a9675610c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DPD package sniffing

TL;DR An unauthenticated API call was identified in DPD Group’s public API that could allow a user with a valid package ID to, with some basic OSINT, discover the package’s destination postcode and thus obtain all details about the package. DPD Group were prompt in the triage and resolution of th...

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: SNYK:JS-PAYPALADAPTIVE-565089...

dpd.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-449074 Description| Value ---|--- Affected Website:| dpd.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID29057: Email Messages Distributing Malicious Software on May 11, 2017

Medium Alert ID: 53794 First Published: 2017 May 11 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29057 may contain the following files: Name | Size...

dpd.com XSS vulnerability

Vulnerable URL: https://www.dpd.com/de/home/siteutilities/kontaktformular/individuelleangebote?site=alert'OPENBUGBOUNTY';...

DPD - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DPD published at the 'play' market has multiple vulnerabilities...

Getdpd BB #4 - (name) Persistent Validation Vulnerability

Document Title: =============== Getdpd BB 4 - name Persistent Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1568 ID: 14772 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID:...

dpd.co.uk XSS vulnerability

Vulnerable URL: http://www.dpd.co.uk/deliverysearch/?quickTrackSearch="-alert/XSSPOSED/-"&search.searchType;=16&search.javascriptValidated;=0=app Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

OpenSwan and StrongSwan DPD Packet Remote Denial of Service - Ver2 (CVE-2009-0790)

A denial-of-service vulnerability has been reported in OpenswanOpenswan Openswan. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CentOS Update for openswan CESA-2009:0402 centos5 i386

Check for the Version of openswan OpenVAS Vulnerability Test CentOS Update for openswan CESA-2009:0402 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Cisco WRV210 null pointer dereference

Exploit for windows platform in category dos / poc ===================================== Cisco WRV210 null pointer dereference ===================================== / 2010-09-24 by Paolo j5r9pn3lka yahoo dot com Product: Cisco WRV210 Wireless-G VPN Router - RangeBooster Type: denial of service...

CentOS 5 : openswan (CESA-2009:0402)

Updated openswan packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key...

SuSE 11 Security Update : strongswan (SAT Patch Number 677)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon. CVE-2009-0790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

Fedora 10 : openswan-2.6.21-2.fc10 (2009-7423)

Mon Jul 6 2009 Avesh Agarwal - 2.6.21-2 - Openswan ASN.1 parser vulnerability CVE-2009-2185 - Mon Mar 30 2009 Avesh Agarwal - 2.6.21-1 - new upstream release - Fix for CVE-2009-0790 DPD crasher - Fix remaining SADBEXTMAX - KSADBEXTMAX entries - Fix ipsec setup --status not showing amount of...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...