Lucene search
K

36 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:15 p.m.5 views

Malicious code in chainutils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 149995e4a1c4d289fa58be2adcab4095dca7c429097ad6735afef8270e7e4cb3 During import, package triggers malicious code. First, it ensures persistency e.g., through the autostart registry key. Then, based on the encrypted config, an...

5.8AI score
Exploits0References6
Malwarebytes
Malwarebytes
added 2025/11/12 10:19 a.m.6 views

How Malwarebytes stops the ransomware attack that most security software can’t see

Imagine this scenario: Your protection software is running perfectly. Systems are protected, definitions are up to date, behavioral analysis is active. Then, suddenly, files across your network start getting encrypted. Backups are being deleted. Ransom notes appear across your machines. Your...

6.5AI score
Exploits0
CNVD
CNVD
added 2025/10/22 12:0 a.m.0 views

ZOHO ManageEngine Applications Manager Information Disclosure Vulnerability (CNVD-2025-29926)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An information disclosure...

6.5CVSS6.3AI score0.00031EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/21 12:0 a.m.1 views

ZOHO ManageEngine Applications Manager 安全漏洞

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An information disclosure...

6.5CVSS6.2AI score0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-0840

Malware in sbrugna...

4.6CVSS6.3AI score0.00374EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-40066

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.00114EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-32454

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00237EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-52600

Malicious code in bioql PyPI...

5.5CVSS7.4AI score0.00042EPSS
Exploits0References8
Fedora
Fedora
added 2025/03/28 3:6 p.m.9 views

[SECURITY] Fedora 41 Update: nodejs-nodemon-3.1.9-3.fc41

Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...

7.5CVSS7.9AI score0.00275EPSS
Exploits1
Fedora
Fedora
added 2025/03/28 2:49 p.m.15 views

[SECURITY] Fedora 40 Update: nodejs-nodemon-3.1.9-3.fc40

Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...

7.5CVSS7.9AI score0.00275EPSS
Exploits1
OSV
OSV
added 2024/12/16 1:59 p.m.12 views

BIT-NODE-MIN-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...

5.3CVSS5.8AI score0.00098EPSS
Exploits0References3
Wiz blog
Wiz blog
added 2024/09/25 3:0 p.m.13 views

Introducing Hybrid File Integrity Monitoring

Enhance your security with Wiz’s new hybrid File Integrity Monitoring FIM solution, combining agentless and runtime capabilities for comprehensive file monitoring...

7.5AI score
Exploits0
Vulnrichment
Vulnrichment
added 2024/09/07 4:0 p.m.19 views

CVE-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...

6AI score0.00098EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/07 4:0 p.m.18 views

CVE-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...

0.00098EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.39 views

Fedora: Security Advisory for watchman (FEDORA-2023-7934802344)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.8AI score0.944EPSS
Exploits19References4
Fedora
Fedora
added 2023/10/24 1:23 a.m.37 views

[SECURITY] Fedora 38 Update: watchman-2021.05.10.00-24.fc38

Watchman exists to watch files and record when they actually change. It can a lso trigger actions such as rebuilding assets when matching files change...

7.5CVSS8.7AI score0.944EPSS
Exploits19
Fedora
Fedora
added 2023/10/24 1:13 a.m.48 views

[SECURITY] Fedora 37 Update: watchman-2021.05.10.00-24.fc37

Watchman exists to watch files and record when they actually change. It can a lso trigger actions such as rebuilding assets when matching files change...

7.5CVSS8.7AI score0.944EPSS
Exploits19
CNNVD
CNNVD
added 2023/06/21 12:0 a.m.1 views

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20 that stems from an inadequate permission model that fails to restrict file monitoring via the fs. watchFile API, which allows an attacker to monitor files for which they...

5.3CVSS6.8AI score0.00098EPSS
Exploits0References3
NVD
NVD
added 2022/09/08 4:15 p.m.9 views

CVE-2022-27968

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET request sent to /WebApp/SettingsFileMonitor/GetFileMonitorProfiles...

5.3CVSS0.00237EPSS
Exploits1References2
OSV
OSV
added 2022/08/16 9:15 p.m.0 views

CVE-2022-37439

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malform...

5.5CVSS5.8AI score0.00114EPSS
Exploits0References2
Rows per page
Query Builder