Lucene search
+L

20627 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/28 5:05 a.m.10 views

Malicious code in seaport-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c3daf7c2577a44884df2696c8fc7fbc4329e375acf9565ddb84ee007686ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/07/28 5:05 a.m.11 views

MAL-2023-766 Malicious code in seaport-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c3daf7c2577a44884df2696c8fc7fbc4329e375acf9565ddb84ee007686ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2023/07/27 7:28 p.m.5 views

@christianhugo/mobile-builder (0.7.3-beta.3), @saltcorn/mobile-builder (>=0.7.2-beta.6, <=0.7.3-beta.3) potentially affected by unknown CVE via @saltcorn/cli (>=0.7.2, <=0.7.3-beta.3)

@saltcorn/cli NPM version =0.7.2, =0.7.2-beta.6, =0.7.3-beta.3 Source cves: unknown CVE Source advisory: OSV:GHSA-WXF3-4FVJ-VQQX...

5.4AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/07/27 8:15 a.m.86 views

Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild

The Cybersecurity and Infrastructure Security Agency CISA added one new vulnerability to its Known Exploited Vulnerabilities Catalog affecting Ivanti Endpoint Manager Mobile, based on evidence of active exploitation. All Federal Civilian Executive Branch FCEB agencies must remediate this...

7.5CVSS6.7AI score0.99999EPSS
SaveExploits14
OSV
OSV
added 2023/07/27 12:15 a.m.7 views

CVE-2023-28014

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

5.4CVSS5.7AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/27 12:15 a.m.25 views

CVE-2023-28014

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

6.6CVSS6.1AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/27 12:15 a.m.11 views

CVE-2023-28012

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

8.8CVSS5.9AI score0.00891EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/27 12:15 a.m.32 views

CVE-2023-28012

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

8.8CVSS6.7AI score0.00891EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/27 12:15 a.m.29 views

Cross site scripting

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

4.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/27 12:00 a.m.12 views

HCL Technologies BigFix Mobile 命令注入漏洞

HCL Technologies BigFix Mobile is a Mobile Device Management MDM solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. HCL Technologies BigFix Mobile suffers from a...

8.8CVSS7.8AI score0.00891EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/27 12:00 a.m.12 views

HCL Technologies BigFix Mobile 跨站脚本漏洞

HCL Technologies BigFix Mobile is a Mobile Device Management MDM solution from HCL Technologies. It is designed to help businesses and organizations effectively manage and secure mobile devices, including smartphones, tablets and other mobile devices. A cross-site scripting vulnerability exists i...

6.6CVSS6.3AI score0.00239EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/27 12:00 a.m.9 views

The vulnerability of the endpoint management application for mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), is related to authentication procedures that lack sufficient safeguards. This allows attackers to escalate their privileges.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

10CVSS8.8AI score0.99999EPSS
SaveExploits14References4Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/07/27 12:00 a.m.12 views

VulnCheck KEV: CVE-2022-0732

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR Insecure Direct Object Reference vulnerability...

7.5CVSS7.1AI score0.02508EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/26 11:31 p.m.70 views

CVE-2023-28014

CVE-2023-28014 affects HCL BigFix Mobile with a cross-site scripting vulnerability. An authenticated attacker could inject malicious scripts into the application. The available materials indicate low/medium impact vectors and that exploitation requires user interaction. No concrete remediation or...

6.6CVSS5.3AI score0.00239EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/26 11:31 p.m.39 views

CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

6.6CVSS6.3AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/26 11:31 p.m.21 views

CVE-2023-28014 HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability

HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application...

6.6CVSS6AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/07/26 11:12 p.m.36 views

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

5.4CVSS9.1AI score0.00891EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/26 11:12 p.m.62 views

CVE-2023-28012

CVE-2023-28012 affects HCL BigFix Mobile WebUI server. The vulnerability is a command injection flaw where input is not properly filtered, allowing an authenticated attacker to execute arbitrary shell commands on the WebUI server. Reported impact includes high confidentiality, integrity, and avai...

8.8CVSS7.4AI score0.00891EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/26 11:12 p.m.26 views

CVE-2023-28012 HCL BigFix Mobile can be affected by a command injection vulnerability

HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server...

5.4CVSS7.5AI score0.00891EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
added 2023/07/26 1:00 p.m.13 views

The Increased Use of Mobile Devices Expands the Threat Landscape

...

7.1AI score
SaveExploits0
Rows per page
Query Builder