Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms

A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules designed to steal data entered in forms by users on websites that include them. The coordinated attack, dubbed IconBurst by ReversingLabs, involves no fewer than two doze...

UBUNTU-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

Thunderbird Firefox ESR Code Execution

The vulnerability of the nsTArrayImpl::ReplaceElementsAt function in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

LDAP Account Manager LDAP Injection

The vulnerability in the LDAP Account Manager web application exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to use the user’s username field to manipulate LDAP data...

LDAP Account Manager Code Execution

The vulnerability of the LDAP Account Manager web application exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the /config/templates/pdf/ directory is accessible to users...

WWebView Component Arbitrary Command Execution

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems lies in the lack of measures taken to neutralize special elements used by the operating system when processing the value parameter. Exploiting this vulnerability allows an attacker to execute...

Mitel Service Appliance Code Execution

The vulnerability of the Mitel Service Appliance component in the MiVoice Connect VoIP devices of the MiVoice system exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary co...

Google Chrome Microsoft Edge Disclosure DoS

The vulnerability of Google Chrome and Microsoft Edge browser extension APIs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures through a specially create...

Trendnet TEW-831DR Router Command Injection

The vulnerability of Trendnet TEW-831DR router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-22980: Improper Neutralization of Special Elements used in an Expression Language Statement

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

MAL-2022-2697 Malicious code in elements-sk-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd0bc0a4e78c684a3994821df16c1aa2473fc887ff980f419e9d68abcc710e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgnsys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4a203409a3a83b3d61ebd1bcde5d7bc7ff085acf3eb51020e0b17e4c68d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-214 Malicious code in @dsgnsys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4a203409a3a83b3d61ebd1bcde5d7bc7ff085acf3eb51020e0b17e4c68d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-730 Malicious code in @wixui/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 841ae669556fea8cf1553cdb84ec5b5caf350f7c51e4fd778581137c797af69e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-727 Malicious code in @wix-ui/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 912baff568719c7c0652531b501d1cd8d3baf6be4a14dc6136f40bb97d4041f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-726 Malicious code in @wix-ui/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d3c996c7fcc5aec2e912a78c2e6a6312000aa86c82ffc19c9e825bdb828eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...