Lucene search
+L

17471 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:54 a.m.•6 views

Malicious code in web-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f3a6f72b9423bc363773c2780efa7445205aa5f412b2c31ca6308f0fbc204ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:45 a.m.•4 views

Malicious code in eds-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48871e9d24d23d91ac9a6a1dcdd1bdeeddccd8afd09e38b55a5e02ad5136ea68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:45 a.m.•9 views

Malicious code in ethrereum-js-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcdc76532c3b912681eb183f0654c2ef268dd8926cd3ee20b3265c930ed09865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/07 12:23 a.m.•12 views

Malicious code in openzepplin-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96160503f6efd74b51cbb0434c82e4d7e8e07d087e3d9578d56ab5563071bcd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CVE
CVE
•added 2024/11/07 12:00 a.m.•65 views

CVE-2020-11921

The Lovense Lush 2 (versions through 2020-02-25) is vulnerable to a security issue caused by a lack of Bluetooth traffic encryption . An attacker can hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone, potentially leading to full control over the device or remote code ex...

7.3AI score0.00245EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•4 views

CVE-2020-11921: Incorrect Default Permissions

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device...

8.8CVSS5.8AI score0.00245EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 11:50 a.m.•7 views

Malicious code in cs-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e21f9be454ca4c14a1b7aaeae9fa0f577a1b615be2af2ac44db9cf09df079f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/06 5:44 a.m.•10 views

MAL-2024-10444 Malicious code in web3-provdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d942789866e82a0d3c0ef2d9af0d928bfcc087ed319f5c5c2155c4a621d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/06 5:35 a.m.•8 views

MAL-2024-10441 Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 5:35 a.m.•9 views

Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 5:29 a.m.•8 views

Malicious code in chat-history-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede6c0203c0d5dfabc8b0ffe97bd7018474fd422452219e3554818ea925ffe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 4:55 a.m.•6 views

Malicious code in case-dispute-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fde58085d55461a9612067c94598825097d9cf29ac90c5a232a9814f55314b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 4:15 a.m.•8 views

Malicious code in web-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a820694573667cc1e95ff7cda09c9a823901bbb9ab2cf03ee94f500ae3fe854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/06 3:24 a.m.•6 views

Malicious code in puppeteerwweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb0748b32f74311c6685d9f83b7f96d02b87da7abe76eddbf2f3d787179eb97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/06 3:15 a.m.•13 views

CVE-2024-49409

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...

6.7CVSS5.8AI score0.00134EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/06 3:15 a.m.•42 views

CVE-2024-49409

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...

6.7CVSS0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/06 2:17 a.m.•24 views

CVE-2024-49409

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...

6.4CVSS6.8AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/06 2:17 a.m.•49 views

CVE-2024-49409

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...

6.4CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/06 2:17 a.m.•76 views

CVE-2024-49409

The vulnerability CVE-2024-49409 affects Galaxy S24 devices in the Battery Full Capacity node. The root cause is an out-of-bounds write, exploitable by a local attacker who already has system privileges. Affects Galaxy S24 firmware prior to the Sep-2024 Release. Remediation is to update to the Se...

6.7CVSS6.4AI score0.00134EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•1 views

CVE-2024-49409: Out-of-bounds Write

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...

6.7CVSS5.8AI score0.00134EPSS
SaveExploits0References1
Rows per page
Query Builder