Malicious code in mock-ea-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d913b2fd6105fcbc7d3b383008930640e91dfe852de474a79c618e6aa1962d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4659 Malicious code in mock-solc-0.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252116288f46e50fdc890ac7683a16796ff2fdd325109640c5d532e01cc615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

br.com.esec.icpm:certillion-client-library (>=1.1.7 <=1.2.0), br.com.esec.icpm:certillion-client-library-resteasy-plugin (>=1.1.9 <=1.1.10) +294 more potentially affected by CVE-2013-2172 via org.apache.santuario:xmlsec (>=1.5.1 <=1.5.4)

org.apache.santuario:xmlsec MAVEN version =1.5.1, =1.1.7, =1.1.9, =1.2.5, =1.0, =ec2-2013-02-01 and more Source cves: CVE-2013-2172 Source advisory: OSV:GHSA-R237-W2W6-JQ3P...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-5.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

Threat Source newsletter (April 28, 2022) — The 2022 Cybersecurity Mock Draft

By Jon Munshaw. Welcome to this week’s edition of the Threat Source newsletter that’s going to be a little different, but bear with me. In honor of the NFL Draft starting this evening — an event that Cisco is helping to secure — I thought it’d be appropriate to look at building a... This is only...

[SECURITY] Fedora 34 Update: golang-github-pact-foundation-1.5.1-5.fc34

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

Code injection

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

CVE-2021-38834

CVE-2021-38834 affects easy-mock versions 1.5.0 through 1.6.0, where remote attackers can bypass the vm2 sandbox and execute arbitrary system commands via specially crafted JavaScript code. This mode of exploitation is described in the vulnerability descriptions and referenced by an exploit entry...

CVE-2021-38834

easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code...

easy-mock 安全漏洞

easy-mock is a persistence service. It can quickly generate simulated data and provide visual views. A security vulnerability exists in easy-mock versions 1.5.0 through 1.6.0, which can be exploited by remote attackers to bypass the vm2 sandbox and execute arbitrary system commands via specially...

com.github.cchacin:cucumber-common-steps (>=0.0.2 <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0 <=1.1.5) +217 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (>=2.0.6 <=3.2.12)

org.apache.cxf:cxf-rt-management MAVEN version =2.0.6, =0.0.2, =1.0.0, =1.0.0, =0.1.0, =2.0.0, =0.1.0, =1.0.0, =2.2.24.11, =2.2.10, =2.2.7, =2.2.9.1, =2.2.7, =2.2.7, =2.2.23.1 and more Source cves: CVE-2020-1954 Source advisory: OSV:GHSA-FFM7-7R8G-77XM...

PT-2025-8568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A subtraction overflow bug has been resolved in the Linux kernel. The issue occurs when hole end is small enough to cause a subtraction overflow, or when addr + 2 min alignment overflows...

GHSA-V39H-QM32-8GWQ Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware

express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the Object.prototype. Exploitation of this vulnerability requires creation of a new directory where an attack code can be placed whic...

What is OpenAPI ❓ Concept, Examples and Advantages

What is OpenAPI? If there is anything that is growing anything like leaps and bounds then it’s API development and awareness towards API’s security. Whether it’s web API or mobile API, growth is significant in each domain. While we discuss API development, OpenAPI deserves a mention for sure. Thi...

Easy-Mock 1.6.0 Remote Code Execution

Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Date: 12/08/2021 Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json...

easy-mock 1.6.0 - Remote Code Execution (Authenticated) Exploit

Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json import random...