Malicious code in @iwcp/nebula-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e24fcc1ba62a0b1cb165fdc4b1075ef12d23d1cf279ec8a71caff22937949b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-367 Malicious code in @iwcp/nebula-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e24fcc1ba62a0b1cb165fdc4b1075ef12d23d1cf279ec8a71caff22937949b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Logic Flaw in Webpage Tampering Prevention System of Beijing Netnifty Nebula Information Technology Co.

Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...

Weak Password Vulnerability in Netnifty's Web Tampering Prevention System

Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...

Logic Flaw Vulnerability in Netnifty's Web Tampering Prevention System

Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...

Leadsec ACM-Management Platform of Beijing Netnifty Information Technology Co.

Based on the information security field, Netnifty Nebula's business covers network boundary security protection, application and data security protection, network-wide security risk management, professional security solutions and professional security services. Beijing Netnifty Nebula Information...

Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

Information Leakage Vulnerability in SSL VPN of Beijing NetGalaxy Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

Nebula - Cloud C2 Framework, Which At The Moment Offers Reconnaissance, Enumeration, Exploitation, Post Exploitation On AWS

Nebula is a Cloud and hopefully DevOps Penetration Testing framework. It is build with modules for each provider and each functionality. As of April 2021, it only covers AWS, but is currently an ongoing project and hopefully will continue to grow to test GCP, Azure, Kubernetes, Docker, or...

SQL Injection Vulnerability in Graduation Design Sampling and Guidance Management System of Hunan Nebula Network Information Technology Co.

Hunan Nebula Network Information Technology Co., Ltd. was founded in 2016, the company is rooted in the field of higher education, especially higher vocational education in Hunan Province. A SQL injection vulnerability exists in the graduation design sampling and guidance management system of Hun...

Friday Squid Blogging: Squid-like Nebula

Pretty astronomical photo. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Remote Code Execution Via Path Traversal

github.com/slackhq/nebula is vulnerable to remote code execution via path traversal. Lack of handling of the user-provided unsafe routes in tundarwin.go or tunwindows.go allows an attacker to set a relative-path value and gain privileges of root-user to bypass security controls and to execute...

Slack Nebula Path Traversal Vulnerability

Slack Nebula is a scalable overlay network tool. A security vulnerability exists in Slack Nebula 1.1.0 and earlier versions. An attacker can exploit the vulnerability to execute code...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

Design/Logic Flaw

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2020-11498

CVE-2020-11498 affects Slack Nebula up to version 1.1.0. A relative-path vulnerability in the tunnel drivers tun_darwin.go and tun_windows.go allows a low-privileged attacker to execute code in the context of the root user, with potential user-context execution as well. The issue enables path tra...

CVE-2020-11498: Improper Limitation of a Pathname to a Restricted Directory

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...