CVE-2023-26801

creationtimestamp| type| source ---|---|--- 2023-03-27 00:39:20+00:00| seen| https://t.me/cibsecurity/60763 2023-05-26 16:50:05+00:00| seen| https://t.me/truesecator/4428 2023-07-12 13:01:49+00:00| seen| MISP/d1468160-fde0-4647-9b90-2fd4be8c85b2 2024-01-08 18:40:02+00:00| seen|...

Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ed9a83072029828451c3aa68fec9a49ec55530b597b59576b0a8c497776385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in follow-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc58a7a39a3da5508a2d0e86e8a9b92384514b331afbb923e6d20295b6c0f65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-screen-reader-announce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc94449e1dfbaea67fc7604cd192d90a355930f498364278937ae27e64050540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-serviceclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6378607eb6158e7d672a2316b410a0e35babc9eb618b207d8dee2c25d1212f7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db779bc3d95749d4bb288d33d42d6febc864b8ab1ce8b51b5ddba5cfac9298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clientcore-base-serviceclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad1ea7ce0422c034f0a94e34659383bef565546e8580fbabe70b9530a317d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-businesslogic-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0524578c578563fb6702db75acc506cf100762a285f1b536add61f45b4e020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devcenter-internal-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cc2065f221e57c6d1888edceccde992285946892dd890445b2f5cdab3002c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-ui-presentationlogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ed28c883575b30f00714232f671ed736feb78c5dcc8ab6326d2d6eacc20466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

.NET 6.0 Update - Mar 14, 2023 (KB5024670)

None None...

Shein's Android App Caught Transmitting Clipboard Data to Remote Servers

An older version of Shein's Android application suffered from a bug that periodically captured and transmitted clipboard contents to a remote server. The Microsoft 365 Defender Research Team said it discovered the problem in version 7.9.2 of the app that was released on December 16, 2021. The iss...

Malicious code in fca-dark-rulex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc65e0b0172e4250c22303c0778367df0d04b4256634ccb454dbff9bcd8415e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0656

creationtimestamp| type| source ---|---|--- 2023-03-03 00:44:38+00:00| seen| https://t.me/cibsecurity/59348 2023-03-06 13:00:08+00:00| seen| https://t.me/truesecator/4134 2023-04-05 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8061 2024-01-16 10:54:08+00:00|...

Malicious code in tpk-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 647a1daab227c3356bfb3368fd4209900a6e742233d3d7db96f36f2f8fde1275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-hakaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26a0c3867c1e183eee88f0eb989c91e58f92e1b05491da0461a4d927c41b1d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

a2grunnerp (>=0.1.0 <=0.1.8), apidriver (>=0.4.0 <=0.9.5) +73 more potentially affected by CVE-2023-26302 via markdown-it-py (>=0.4.6 <=2.1.0)

markdown-it-py PYPI version =0.4.6, =0.1.0, =0.4.0, =1.0.148, =1.1.13, =0.1.0, =0.0.1, =3.72.0, =2.2.0, =0.10.0, =2.2.0, =0.0.5, =0.0.13 - gamesdb-api =0.3.1 and more Source cves: CVE-2023-26302 Source advisory: OSV:GHSA-JRWR-5X3P-HVC3...

K07538415: Multiple OpenSSL vulnerabilities

Security Advisory Description On May 3, 2016, OpenSSL announced the discovery of the following vulnerabilities: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 CVE-2016-2176 For the complete announcement from OpenSSL, refer to OpenSSL Security Advisory 3rd May 2016. Note :...

K52559937: Overview of NGINX vulnerabilities (May 2021)

Security Advisory Description On May 25, 2021, NGINX announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your NGINX systems. The details of each issue can be found in the associated Security Advisory...