Lucene search
+L

588 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/10/19 11:50 p.m.7 views

Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:19 p.m.7 views

Malicious code in calc_9lmhs75x86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bfff861998922e3919713d414b8ab7bdb1a7801017a982443721c6a18fbc03a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.7 views

Malicious code in free-fortnite-skins-avicu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66ea6e86784f4ba64d171619a1c37800732e9659932d3f2be1a7275235ded8f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.7 views

Malicious code in free-pokemon-go-promo-codes-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb06d31da6a5c37479f3f071ec551473de8fd747ae9455c8ebb1908ac391abab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/05/24 4:57 p.m.27 views

GHSA-9F3P-WVJ7-Q82X Cargo prior to Rust 1.26.0 may download the wrong dependency

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...

7.5CVSS7.4AI score0.0126EPSS
SaveExploits1References6
nodejs
nodejs
added 2019/06/10 5:07 p.m.21 views

Malicious Package

Overview All versions of maleficent contain malicious code. The package is a demonstration of possible risks when installing npm packages. It gathers system information such as: environment variables, OS information, network interface, AWS credentials, npm credentials and ssh keys. The package...

6.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.14 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the qt3-32bit operating system package from openSUSE can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

6.8CVSS5.4AI score0.04203EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.13 views

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libtool-1.5.22 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

6.9CVSS6.8AI score0.00394EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder