40 matches found
MAL-2022-1222 Malicious code in azure-agrifood-farming-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70bd0544a3d32cf819c6e87d07d1e2fe5ab149b1bd94e46c1a70a7fd2f4619d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-agrifood-farming (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e3e7a21dfea86d022f376f11c1bc47367864f6bdbc181f71a802b410267782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1221 Malicious code in azure-agrifood-farming (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e3e7a21dfea86d022f376f11c1bc47367864f6bdbc181f71a802b410267782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-agrifood-farming-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389753c632d882662d94001f13cd022e978b7430f4534f1878a3610dd5f0e5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1223 Malicious code in azure-agrifood-farming-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389753c632d882662d94001f13cd022e978b7430f4534f1878a3610dd5f0e5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in agrifood-farming (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1c9a8ed5921e9f3f401296706f00444469f70c51a24dff2ea4818fa2f7b50df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[WP-H4] anchor_basset_reward pending yields can be stolen
Lines of code Vulnerability details For yield farming aggregators, if the pending yield on an underlying strategy can be harvested and cause a surge of rewards to all existing investors, especially if the harvest can be triggered permissionlessly. Then the attacker can amplify the attack using a...
Connected Farms Easy Pickings for Global Food Supply-Chain Hack
A group of hackers made an unnerving DEF CON 29 presentation showing how the sprawling growth of digital and automated farming has left the world’s food supply chain vulnerable to cyberattack. A video for DEF CON 29 hacker conference this week put out by the group Sick Codes explained that modern...
farming-simulator.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1161464 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Stored Cross-site Scripting Vulnerability in the Merchant Center Function of Farming Building Station Mall-based System
Farming Builders is a new generation of SaaS cloud intelligent website building tools. A stored cross-site scripting vulnerability exists in the Merchant Center feature of the Farming Station mall-based system. Attackers can use the vulnerability to insert malicious js code to obtain user cookies...
XSS Vulnerability in Xi'an Gibbon Network Co.
Farming Builders is a new generation of SaaS cloud intelligent website building tools. Xi'an Gibbon Network Co., Ltd. station building system exists XSS vulnerability, attackers can use the vulnerability to insert malicious js code, to obtain user cookies and other information...
Phone Pharming for Ad Fraud
Interesting article on people using banks of smartphones to commit ad fraud for profit. No one knows how prevalent ad fraud is on the Internet. I believe it is surprisingly high -- here's an article that places losses between $6.5 and $19 billion annually -- and something companies like Google an...
Explained: like-farming
Like-farming, aka like-harvesting, is a method used by commercial parties and scammers alike to raise the popularity of a site or domain. The ultimate dream of every like-farmer is for his post to go viral by accumulating as many likes and shares as possible from all over the world. Like-farmers...
farming-simulator.com XSS vulnerability
Open Bug Bounty ID: OBB-711679 Description| Value ---|--- Affected Website:| farming-simulator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
farming-simulator.com XSS vulnerability
Open Bug Bounty ID: OBB-623139 Description| Value ---|--- Affected Website:| farming-simulator.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Farming Simulator 14 - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Farming Simulator 14 published at the 'play' market has multiple vulnerabilities...
Farming Simulator 3D - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Farming Simulator 3D published at the 'play' market has multiple vulnerabilities...
Farming simulator 15 mods - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Farming simulator 15 mods published at the 'play' market has multiple vulnerabilities...
Honey Farming - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Honey Farming published at the 'play' market has multiple vulnerabilities...
How Bug Bounties Are Like Rat Farming
UPDATED SAN FRANCISCO–It’s become fashionable of late to have people from outside the industry give keynotes at security conferences as a way of providing a fresh perspective or unique insight into what security means. Often, that fresh perspective turns out to be some variation of the “I don’t...