Lucene search
+L

7240 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:16 p.m.6 views

Malicious code in azure-monitor-opentelemetry-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4105e451e06ab909d8a5420349c767fec791355572db7e3696eb80c244fb050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:16 p.m.8 views

MAL-2022-1358 Malicious code in azure-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6409892ee45f80a5b5f76cf05c31159bfe504375ae8e0f7ddf5a8b56bf3d566c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:16 p.m.17 views

MAL-2022-1357 Malicious code in azure-monitor-opentelemetry-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4105e451e06ab909d8a5420349c767fec791355572db7e3696eb80c244fb050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.6 views

Malicious code in monitor-opentelemetry-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729620b347fffdb19db80ab7389b2228d0b739d11d68fc8bed393e29ed9dd745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.10 views

MAL-2022-4689 Malicious code in monitor-opentelemetry-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729620b347fffdb19db80ab7389b2228d0b739d11d68fc8bed393e29ed9dd745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/17 2:15 p.m.7 views

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

9.8CVSS5.8AI score0.04501EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/06/17 2:15 p.m.4 views

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

9.8CVSS7.2AI score0.04501EPSS
SaveExploits1References4
NVD
NVD
added 2022/06/17 2:15 p.m.32 views

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

9.8CVSS0.04501EPSS
SaveExploits1References3
Prion
Prion
added 2022/06/17 2:15 p.m.23 views

Design/Logic Flaw

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

7.5CVSS9.3AI score0.04501EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/06/17 1:46 p.m.76 views

CVE-2021-40903

CVE-2021-40903 affects Antminer Monitor 0.50.0 via a backdoor or misconfiguration in the Flask server settings file, where a secret string is predefined and static. This could enable improper access or governance issues due to static credentials embedded in the configuration. remediation availabl...

9.8CVSS9.3AI score0.04501EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/06/17 1:46 p.m.35 views

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

9.6AI score0.04501EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/06/17 12:0 a.m.10 views

PT-2022-11331 · Unknown · Antminer Monitor

Name of the Vulnerable Software and Affected Versions: Antminer Monitor version 0.50.0 Description: A vulnerability exists in the Antminer Monitor due to a backdoor or misconfiguration inside a settings file in the flask server. The settings file contains a predefined secret string that is static...

9.8CVSS9.3AI score0.04501EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.5 views

Antminer Monitor 信任管理问题漏洞

Antminer Monitor is a cryptocurrency ASIC mining hardware monitor using a simple web interface by the individual developer Anastasios Selalmazidis in Greece. A trust management issue vulnerability exists in Antminer Monitor version 0.50.0, which is caused by a backdoor or misconfiguration in the...

9.8CVSS8.3AI score0.04501EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/06/09 12:0 a.m.16 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in all...

7.2CVSS6.6AI score0.00341EPSS
SaveExploits0References21
CNNVD
CNNVD
added 2022/06/09 12:0 a.m.4 views

PHP 安全漏洞

PHP is a scripting language that is executed server-side. A security vulnerability exists in PHP. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

8.1CVSS7.9AI score0.03437EPSS
SaveExploits1References28
CNNVD
CNNVD
added 2022/06/07 12:0 a.m.5 views

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A security vulnerability exists in Google Go. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

7.5CVSS7.5AI score0.02057EPSS
SaveExploits1References11
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/01 10:20 a.m.61 views

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability CVE-2021-35550

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability...

7.1CVSS6.7AI score0.06868EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2022/05/30 12:30 p.m.24 views

PersistBOF - Tool To Help Automate Common Persistence Mechanisms

A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, and Junction Folder User Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in CS console Syntax:...

7.4AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2022/05/24 10:1 p.m.6 views

br.com.labbs:quarkus-monitor (>=0.1.5 <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5 <=0.3.0) +356 more potentially affected by CVE-2020-1695 via org.jboss.resteasy:resteasy-client (>=4.0.0.Beta1 <=4.5.9.Final)

org.jboss.resteasy:resteasy-client MAVEN version =4.0.0.Beta1, =0.1.5, =0.1.5, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =1.0.0, =1.0.0-alpha3 and more Source cves: CVE-2020-1695 Source advisory: OSV:GHSA-63CQ-PPQ8-CW6G...

7.5CVSS7AI score0.02023EPSS
SaveExploits0
OSV
OSV
added 2022/05/24 7:15 p.m.19 views

GHSA-5W5C-3G26-8MMC furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

8.7CVSS7.4AI score0.02529EPSS
SaveExploits6References6
Rows per page
Query Builder