ESFang

ESFang This is a tool devised for modular consumption of EndpointSecurity Framework ESF events from the MacOs environment. This is my attempt to overcome a number of issues encountered with existing tools including things such as silent data dropping, strict event type consumption, lack of suppor...

Malicious code in @biz44/id99-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Malicious code in @biz44/id44-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

Malicious code in @biz44/id95-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the leakage of information about files and directories. Exploiting this vulnerability can allow attackers to disclose protected information...

IBM QRadar Privilege Escalation

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to privilege assignment errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

GitLab 11.7 < 18.3.5 / 18.4 < 18.4.3 / 18.5 < 18.5.1 (CVE-2025-11974)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Improper access control issue in runner API impacts GitLab EE Denial of service issue in event collection impacts GitLab CE/EE Denial of service issue in JSON validation impacts GitLab...

PT-2025-43134

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0 Description An issue in GitLab CE/EE could allow an unauthenticated attacker to cause a denial of service condition ...

Gitlab -- vulnerabilities

Gitlab reports: Improper access control issue in runner API impacts GitLab EE Denial of service issue in event collection impacts GitLab CE/EE Denial of service issue in JSON validation impacts GitLab CE/EE Denial of service issue in upload impacts GitLab CE/EE Incorrect Authorization issue in...

IBM QRadar SIEM XML External Object Access Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using a...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Setup and Boot Event Collection function Code Execution

The vulnerability of the Setup and Boot Event Collection function in Microsoft Windows systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

IBM QRadar SIEM Man-in-the-Middle

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...

IBM QRadar SIEM Disclosure of Protected Information

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

IBM QRadar SIEM Unauthorized Access

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

IBM QRadar SIEM Administrative Action

The vulnerability of IBM QRadar SIEM’s event collection and analysis system exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to carry out administrative actions...

IBM QRadar SIEM Disclosure of Protected Information

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

IBM QRadar SIEM Cryptographic Defect Bypass

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to bypass the cryptographic security measures...