MAL-2022-1575 Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in billpay-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a759527abbcec42ad5ff8cf7e6895167d38072691372ff862df1d4b9e38373b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4651 Malicious code in mobile-guild-kb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5411acc8e88aa97cb7acff34873c8baf6b92d02bd87cd23292294dae6a232ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shineout-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464fcb75d15a9834db9381502bb0698a424a9423127dc465313aaf6e27b9bbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statusim-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd2cb491732cf09ea01c6998ed53b9bbe6e617f6dc92f745da1298a8b0da6c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-pokemon-go-spoofer-ios-apk-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0db129f987cd3dc788ee2d248495349ba7c3cae85e9f80507bfdfc9ca48f91e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7111 Malicious code in wechat-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d33ded9daa26b1d3dac127b3e5efc1765043c402e1fd200c666be59bf9fcb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nightingale - Docker Environment For Pentesting Which Having All The Required Tool For VAPT

In today's technological era, docker is the most powerful technology in each and every domain, whether it is Development, cyber security, DevOps, Automation, or Infrastructure. Considering the demand of the industry, I would like to introduce my idea to create a NIGHTINGALE: docker image for...

mobilehomeclassifieds.com Cross Site Scripting vulnerability OBB-2653709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Samsung SmartThings PendingIntent Hijacking Vulnerability

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

Huawei Emui and Magic UI Logic Flaw Vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a logic flaw. An attacker could exploit the vulnerability to affect the usability of certain features...

Samsung LSOItemData Elevation of Privilege Vulnerability

Samsung LSOItemData is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung LSOItemData. The vulnerability stems from a lack of proper authentication logic in LSOItemData, which could be exploited by an attacker to initiate certain activities...

Samsung mobile libsmkvextractor input validation error vulnerability (CNVD-2022-87038)

Samsung mobile devices are a family of mobile products from Samsung South Korea. samsung mobile libsmkvextractor is vulnerable to an input validation error. The vulnerability stems from incorrect input validation logic in libsmkvextractor, which can be exploited by an attacker to cause a denial o...

Samsung KfaOptions Elevation of Privilege Vulnerability

Samsung KfaOptions is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung KfaOptions, which stems from a lack of proper authentication logic in KfaOptions. An attacker could use this vulnerability to launch certain activities...

Amodat Mobile Application Gateway SQL Injection Vulnerability

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...

HUAWEI EMUI and Magic UI Information Disclosure Vulnerability

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an information disclosure vulnerability that stems from a configuration flaw in the Secure Operating System module, which can be exploited by ...

HUAWEI EMUI and Magic UI Authorization Issue Vulnerability

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an authorization issue vulnerability that stems from a lack of authorization in a system component, which can be exploited by an attacker to...

WordPress Mobile browser color select plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...