Malicious Typo-Squatting

nodecaffe is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...

CVE-2015-7255

ZTE OX-330P, ZXHN H108N, W300V1.0.0SZRDTR1D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certificates and SSH host keys, which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack, passive decryption attack, or...

CVE-2017-5640

It was noticed that a malicious process impersonating an Impala daemon in Apache Impala incubating 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled but TLS is not. If the malicious server responds with 'COMPLETE' before the SASL handshake has...

Fake Facebook Profile For NATO Senior Commander Used To Phish Senior Brass

A fake Facebook profile for NATO Senior Commander James Stavridis, a US Navy Admiral, was used to trick senior officers in both the U.S. and British military to becoming friends. The spear phishing attack is of unknown origin and is believed to have divulged a wide range of personal information o...

Solaris SPARC / x86 Local Socket Hijack Exploit

Exploit for solaris platform in category local exploits =============================================== Solaris SPARC / x86 Local Socket Hijack Exploit =============================================== / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug...

Nokia Affix < 3.2.0 btftp Remote Client Exploit

Exploit for hardware platform in category remote exploits =============================================== Nokia Affix open 00:04:3e:65:a1:c8 Connected. ftp ls Z8????Tnb 6 u???u???3?????????^v?0^????5??24????????V6?V ????? ????????Xq?X6?Y0 ----------------------...