Malicious code in astam-akif-dalimunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614bd4bffb2dfee60047ea1585dff6b5d5a06f6ece161973e2c686c0f9d45523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Microsoft Flags AI Phishing Attack Hiding in SVG Files

Microsoft Threat Intelligence detected a new AI-powered phishing campaign using LLMs to hide malicious code inside SVG files disguised as business dashboards...

Malicious code in @shizzy/jk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df90cac0b48a0b7c0a57f96ecabc807a0a4aa65550cca5ab8dad777e2801107a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

F-Secure BlackLight 2.2.1092 Local Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits F-Secure BlackLight 2.2.1092 Local Privilege Escalation Vulnerability Vendor: F-Secure Corporation Product web page: http://www.f-secure.com http://www.f-secure.com/enEMEA-Labs/security-threats/tools/blacklight/ Affected version: 2.2.1092...

Mozilla Firefox / Thunderbird / Seamonkey buffer overflow

Buffer overflow on document.write and DOM insertion is used in-the-wile for hidden malware installation...

Mozilla Firefox cross domain access

By using location.hostname='evil.comx00foo.example.com' in javascript it's possible to make request for foo.example.com domain to be sent to evil.com. It makes it possible cross-domain access. Vulnerability can be used for hidden malware installation...

Microsoft Excel 0-day vulnerability

Unknown vulnerability is used for hidden malware installation...

Sun Java memory corruption

Memory corruption on GIF files parsing with 0 width block. Can be used for hidden malware installation...

Microsoft Word 2000 unknown vulnerability

Unknown security vulnerability is used hor hidden malware installation...

Microsoft JScript (Internet Explorer) memory corruption

Memory corruption on objects release. May be used for hidden malware installation...

Microsoft Windows MDAC code execution

RDS.Dataspace ActiveX object is marked as safe. Can be used for hidden malware installation with Internet Explorer...