155 matches found
Malicious code in webext-experiment-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d468aa93a14febc9fa5b285255c1a223fa9abd1aa0e614c6dbe3a57a18f412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7092 Malicious code in webext-experiment-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d468aa93a14febc9fa5b285255c1a223fa9abd1aa0e614c6dbe3a57a18f412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-313 Malicious code in @harrysforge/gatsby-theme-experiment-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e54e93376c3ca31dfee91c73665439b55cb00e252cd60fba6a27453eabfebdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4185 Malicious code in klook-node-framework-experiment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0620cf6726fbf4eed556cd2acf308841477671f166e470d3f28d0a8c437fdcaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Unrestricted file upload
Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...
CVE-2022-28120: Unrestricted Upload of File with Dangerous Type
Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...
PT-2022-18825
Name of the Vulnerable Software and Affected Versions Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software version 2.0 Description The issue concerns a file upload vulnerability that can be exploited by an attacker to gain control of...
CVE-2021-43775
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash ../” sequences and its variations or by using absolute file paths, it may be...
Path traversal
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash ../� sequences and its variations or by using absolute file paths, it may ...
CVE-2021-43775
CVE-2021-43775 affects the Aim open‑source, self‑hosted machine learning experiment tracker. Public records describe a path traversal vulnerability in versions prior to 3.1.0, exploitable by manipulating references to files using dot-dot-slash sequences or absolute paths to access arbitrary files...
How 30 Lines of Code Blew Up a 27-Ton Generator
A secret experiment in 2007 proved that hackers could devastate power grid equipment beyond repair—with a file no bigger than a gif...
Injectus - CRLF And Open Redirect Fuzzer
Simple python tool that goes through a list of URLs trying CRLF and open redirect payloads. ▪ ▐ ▄ ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄• ▄▌.▄▄ · ██ •█▌▐█ ·██▀▄.▀·▐█ ▌▪•██ █▪██▌▐█ ▀. ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪█▌▐█▌▄▀▀▀█▄ ▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█▄█▌▐█▄▪▐█ ▀▀▀▀ ██▪ ▀▀▀• ▀▀▀ ·▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀▀ BOUNTYSTRIKE...
Smart TVs, Subscription Services Leak Data to Facebook, Google
Smart TVs and so-called “over the top” OTT platforms are the latest IoT devices found “spying” on users and leaking sensitive data to companies such as Facebook, Amazon, Google and Netflix, according to two separate studies conducted by university researchers as well as independent research done ...
Google to Experiment 'DNS over HTTPS' (DoH) Feature in Chrome 78
Immediately after Mozilla announced its plan to soon enable 'DNS over HTTPS' DoH by default for Firefox users in the United States, Google today says it is planning an experiment with the privacy-focused technology in its upcoming Chrome 78. Under development since 2017, 'DNS over HTTPS' performs...
AI Emotion-Detection Arms Race
Voice systems are increasingly using AI techniques to determine emotion. A new paper describes an AI-based countermeasure to mask emotion in spoken words. Their method for masking emotion involves collecting speech, analyzing it, and extracting emotional features from the raw signal. Next, an AI...
CVE-2017-18547
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms...
CVE-2017-18547
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms...
Cross site request forgery (csrf)
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms...
