289 matches found
Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx
CVE-2021-40444 प्रमाण-अवधारणा CVE-2021-40444 Microsoft Office Word रिमोट कोड निष्पादन का शोषण करने के लिए दुर्भावनापूर्ण docx जनरेटर इस स्क्रिप्ट का निर्माण जंगल में उपयोग किए गए नमूने पर किए गए कुछ रिवर्स इंजीनियरिंग पर आधारित है: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52...
yamaha-smaf-player
Yamaha SMAF Player C++ di Akustikrausch Andreas Wendorf un piccolo riproduttore senza dipendenze per suonerie Yamaha SMAF .mmf in c++. gli fornisci uno di quei file che facevano andare il tuo samsung, sharp o panasonic deedle-deedle-dee nel 2004, e lui ti restituisce audio stereo pulito. niente...
CVE-2023-49899 Origin Validation Error in X-Rite MA-T6
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
CVE-2023-49899
Summary: CVE-2023-49899 affects X-Rite MAT 6 Kohinoor embedded spectrometer software. The root cause is insufficient origin validation/input validation in the communication channel, enabling a remote, unauthenticated attacker to execute commands on the device. Vulnerability details: Affected prod...
CVE-2023-49900 Origin Validation Error in X-Rite MA-T6
An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command...
CVE-2023-49900
CVE-2023-49900 affects X-Rite MAT 6 Kohinoor embedded spectrophotometer software. The issue is an origin validation error caused by incorrectly sanitized input in the SetParameter command, enabling an unauthenticated remote attacker to achieve remote code execution. The CVSS 3.1 vector is Network...
MAL-2026-3028 Malicious code in amplitude-ma-ts (npm)
npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils hostname, whoami, pwd, publicip api.ipify.org, /etc/hosts via Discord embed. v1.0.21 empty placeholder, v1.0.22 shipped payload — name-squat-then-poison. Typosquats @amplitude/ analytics scope...
Malicious code in amplitude-ma-ts (npm)
npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils hostname, whoami, pwd, publicip api.ipify.org, /etc/hosts via Discord embed. v1.0.21 empty placeholder, v1.0.22 shipped payload — name-squat-then-poison. Typosquats @amplitude/ analytics scope...
EUVD-2025-143022
Malicious code in buis-suninna-ma npm...
EUVD-2025-140276
Malicious code in miands-ma-nuru npm...
EUVD-2025-143146
Malicious code in buis-manis-ma npm...
EUVD-2025-143259
Malicious code in anita-manahudat-ma npm...
EUVD-2025-143254
Malicious code in anita-manuat-ma npm...
Malicious code in anita-manahuddat-ma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3de13d54ba9842e6d52f3da49c6c944ccad04b31de8f5a2ad44f9ae82e6955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-143255
Malicious code in anita-manhuat-ma npm...
EUVD-2025-143256
Malicious code in anita-manahuddat-ma npm...
EUVD-2025-144454
Malicious code in hereis-ma-ta npm...
EUVD-2025-147281
Malicious code in uaragifa-ma-safu npm...
Malicious code in uaragifa-ma-sfu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ce72cb833aa70a4e533f84cddf331ff853fc05a8443952a6c3f25cab5f7eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...