Malicious code in dontblowthisoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5c38fb9ecda26d5c95ebecbd9228db2f2e33cd6075678b149fcd1ed40e7691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1929 Malicious code in clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6575bc8b9c9df76806967bea87397ecc8df21860f0a7f91b4e5a8ffc317e8db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unauthorized Access Vulnerability in Rongdu Guarantee Business Management System of Hangzhou Rongdu Technology Co.

Rongdu Technology is a leading financial technology system software and solution service provider, a strategic investment enterprise of Hang Seng Electronics, providing banking intelligent marketing system, guarantee business management system, factoring system, small loan business management...

Authentication flaw

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip encoding/decoding XML data...

SQL Injection Vulnerability in Free Version of Keele Intermediary Guarantee System

KILO Intermediary Guarantee System is a TP5.1 based intermediary guarantee transaction system. The free version of KILO Intermediary Guarantee System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Malicious Package in coinpayment

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

NetWalker Ransomware Gang Hunts for Top-Notch Affiliates

The NetWalker ransomware – the scourge behind one of the recent Toll Group attacks – has transitioned to a ransomware-as-a-service RaaS model, and its operators are placing a heavy emphasis on targeting and attracting technically advanced affiliates, according to researchers. Traditionally,...

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PRODSECBUG-2425: Cross-Site Scripting via Signifyd Guarantee Option Translation Override

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

guarantee-of-origin.ch XSS vulnerability

Vulnerable URL: https://www.guarantee-of-origin.ch/defaultordertracking.asp?language=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Stampado Ransomware Sells on Dark Web for $39

Dirt cheap ransomware selling for as little as $39 on the dark web has security experts concerned the low price coupled with its potency could trigger a wave of new infections. The ransomware is called Stampado and besides its hallmark low price, the ransomware is also unique because it threatens...

Write a unable to uninstall the App – Device Manager vulnerability-vulnerability warning-the black bar safety net

Two days ago some friends found the phone has an app cannot be uninstalled, after known because the Device Manager to activate the LED, then go try to cancel, but the cancel the the moment the card machine. Repeatedly toss after, only to re-brush. Later he sent an article about the Device Manager...

Robert Hansen on Aviator and the $250,000 Security Guarantee

Dennis Fisher talks with Robert Hansen of WhiteHat Security about the company’s decision to change default search providers in their Aviator browser to Disconnect and the $250,000 guarantee for users of the Sentinel Elite product. ​Download: Robert Hansen on Aviator, Search Revenue and the $250,0...

Role of free Hosting in Cyber Crime

Role of free Hosting in Cyber Crime Zscaler experts notice that free hosting and DNS providers abused for hosting Phishing Pages, Spamming, Botnets or Malwares. Many free hosted sites considered as spam. They list "x90x.net" Free hosting Provider which used to host many Facebook Phishing sites...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

CVE-2007-4752

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted...