Lucene search
+L

13 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•7 views

Malicious code in checkout-mobile-accounts (npm)

Source: amazon-inspector 7e767e42a2a85ea01a996ada873c5ddcea0c13a56a33e44255694786dfe7b8f2 On require, the package loads platform.js which selects a per-OS asset path and downloads an executable payload from hostnames reconstructed at runtime via array-join to hide them from static analysis...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:13 a.m.•5 views

Malicious code in checkout-mobile-accounts-old (npm)

Source: amazon-inspector 67f6eeca2bb17729fe666aaaf6849e26c474a130f5a17ca7dfe6c4c6c6ae4e8a On require of checkout-mobile-accounts-old, index.js loads support.js which downloads a platform-specific native binary from hardcoded Cloudflare Workers hosts oob-worker.cf103-070.workers.dev,...

6.3AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 2:10 p.m.•29 views

Malicious code in checkout-mobile-accounts-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6eeca2bb17729fe666aaaf6849e26c474a130f5a17ca7dfe6c4c6c6ae4e8a On require of checkout-mobile-accounts-old, index.js loads support.js which downloads a platform-specific native binary from hardcoded Cloudflare...

6.4AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/08/05 2:10 p.m.•24 views

MAL-2026-12571 Malicious code in checkout-mobile-accounts-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6eeca2bb17729fe666aaaf6849e26c474a130f5a17ca7dfe6c4c6c6ae4e8a On require of checkout-mobile-accounts-old, index.js loads support.js which downloads a platform-specific native binary from hardcoded Cloudflare...

6.4AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2010-1858

Malware in sbrugna...

4.4CVSS5.8AI score0.00673EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-3667

Malware in sbrugna...

4.3CVSS5.8AI score0.01439EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 3:55 a.m.•24 views

CVE-2012-3720

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account...

4.3CVSS5.9AI score0.01439EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2012/09/25 12:00 a.m.•71 views

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. OpenVAS Vulnerability Test $Id: gbmacosxsu12-004.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X v10.6.8 Multiple Vulnerabilities 2012-004 Authors: Madhuri D Copyright:...

10CVSS7.3AI score0.99998EPSS
SaveExploits89References4
Prion
Prion
•added 2012/09/20 9:55 p.m.•32 views

Xxe

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account...

4.3CVSS6.9AI score0.01439EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/20 12:00 a.m.•10 views

CVE-2012-3720: Undefined Security Weakness

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account...

4.3CVSS5.9AI score0.01439EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/09/20 12:00 a.m.•104 views

Mac OS X 10.8.x < 10.8.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.2. The newer version contains multiple security-related fixes for the following components : - BIND - Data Security - LoginWindow - Mobile Accounts - PHP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

10CVSS7.3AI score0.99998EPSS
SaveExploits57References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/15 12:00 a.m.•5 views

CVE-2010-1838: Improper Authentication

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name...

4.4CVSS5.8AI score0.00673EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2010/11/15 12:00 a.m.•12 views

PT-2010-3465

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.5.8 through 10.6.4 Description The issue is related to Directory Services in Apple Mac OS X, where it does not properly handle errors associated with disabled mobile accounts. This allows remote attackers to bypass...

4.4CVSS0.00673EPSS
SaveExploits0References5
Rows per page
Query Builder