MAL-2024-11759 Malicious code in detection-rules-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b2dc0e1b956b76c550587e90653267b618f257e8f5243aa8df3c04b3002e89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Windows File Explorer Information Disclosure Vulnerability

...

Microsoft Windows File Explorer 路径遍历漏洞

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A path traversal vulnerability exists in Microsoft Windows File Explorer. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are...

PT-2024-9448 · Microsoft · Windows File Explorer +1

Name of the Vulnerable Software and Affected Versions: Windows File Explorer affected versions not specified Description: The issue is related to incorrect restriction of a directory path name with limited access in the Windows File Explorer application. This can allow a remote attacker to gain...

CVE-2024-49581 Access control issue impacting RV backed objects

Restricted Views backed objects OSV1 could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available...

CVE-2024-49581

CVE-2024-49581 affects Palantir Foundry (Apollo-managed Foundry instances). A software bug in Restricted Views backed objects (OSV1) could be bypassed under specific circumstances, allowing users without permission to view such objects via the Object Explorer. The issue did not enable cross-organ...

CVE-2024-49581 Access control issue impacting RV backed objects

Restricted Views backed objects OSV1 could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. This software bug did not impact or otherwise make data available...

PT-2024-33555 · Foundry · Foundry

Name of the Vulnerable Software and Affected Versions: Foundry affected versions not specified Description: A software bug could allow users without permission to view restricted objects directly through the Object Explorer under specific circumstances. This issue did not make data available acro...

Palantir Foundry 安全漏洞

Palantir Foundry is a business process management platform from US-based Palantir, Inc. A security vulnerability exists in Palantir Foundry versions 105.110.1 through 105.115.0, which stems from Objects Supported by Restricted Views OSV1 can be bypassed, allowing users not authorized to view such...

KB5046630: Cumulative security update for Internet Explorer: November 12, 2024

None None...

Unwrapping the emerging Interlock ransomware attack

Cisco Talos Incident Response Talos IR recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Our analysis uncovered that the attacker used multiple components in the delivery chain including a Remote Access Tool RAT...

Advanced Browser Data Extraction for Chromium and Gecko Browsers

This post-exploitation module extracts sensitive browser data from both Chromium-based and Gecko-based browsers on the target system. It supports the decryption of passwords and cookies using Windows Data Protection API DPAPI and can extract additional data such as browsing history, keyword searc...

Security Bulletin: IBM MQ Explorer is affected by a vulnerability in the IBM Semeru Runtime (CVE-2024-21085)

Summary An issue was identified with IBM Semeru Runtime, Version 17, which is used in IBM MQ Explorer. Vulnerability Details CVEID:CVE-2024-21085 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low availability impacts. CVSS...

CVE-2023-5816

The Code Explorer plugin for WordPress is vulnerable to arbitrary external file reading in all versions up to, and including, 1.4.5. This is due to the fact that the plugin does not restrict accessing files to those outside of the WordPress instance, though the intention of the plugin is to only...

CVE-2023-5816

CVE-2023-5816 concerns the WordPress plugin Code Explorer (

WordPress plugin Code Explorer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Code Explorer plugin <= 1.4.5 - Authenticated (Admin+) External File Reading vulnerability

Authenticated Admin+ External File Reading vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Code Explorer versions = 1.4.5...

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Campus Explorer Campus Explorer Widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through 1.4...

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

CVE-2024-49660 WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...