Lucene search
+L

6546 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 7:4 a.m.4 views

Malicious code in em5tbe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 492f9a997b1926900687c4080a687bfd21307fcdca9a1e6d5a491ce2453f1ca0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 7:4 a.m.4 views

Malicious code in new-script-tabg-c-h-e-a-t-f-r-e-e-h-a-c-k-iqaij3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8d4800aa06751461d9c49fc63503ebb13d913c3dbfce484d4fb1abde756e0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 7:4 a.m.6 views

Malicious code in new-code-script-down-lo-ad-jjsploit-roblox-executor-fi7j8p (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ba7e29bf181a9fc2806a8929c4fbd604f9ac9bf7d14d4b59b0fdd97918b3194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 7:4 a.m.6 views

Malicious code in new-code-script-f-r-e-e-actors-tycoon-script-t5fhi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a5f1736ff58b1ee45e9727786fd5a975016912c7d0aaef296236022638c8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 7:4 a.m.7 views

Malicious code in updated-script-50-50-pick-a-door-script-rooms-check-vr6en2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac1bc9fbd4f7c9635108ea3cac255349528e74daacde9997d945a284f644c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 5:6 a.m.6 views

Malicious code in replaceable-media-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6f6611eabb1686bf9e41a305a75a4bce89c0c30c903fc91235ffd22895e097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 5:6 a.m.6 views

Malicious code in nanoslackts-env-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe61e9c24b26d76088e167848056dfe52c47156a72948c418b51b949e65b3e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/09 5:6 a.m.7 views

Malicious code in annotation-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2732273e139ee7c5d41de6000e70acf725f550c02141b87340c6a2845111d19c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
added 2024/10/07 10:15 p.m.15 views

CVE-2024-45874

A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Vooki.exe...

9.8CVSS0.00726EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/07 7:51 p.m.21 views

CVE-2024-31227 Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users...

4.4CVSS6.9AI score0.00398EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/07 12:0 a.m.62 views

CVE-2024-45873

VegaBird Yaazhini 2.0.2 is affected by a DLL hijacking vulnerability that lets an attacker place a crafted DLL in the Yaazhini.exe directory to execute arbitrary code or maintain persistence. Exploitation involves dropping a DLL (e.g., dcomp.dll) in the application folder and launching Yaazhini.e...

9.8CVSS8AI score0.00726EPSS
SaveExploits1References1
CVE
CVE
added 2024/10/07 12:0 a.m.58 views

CVE-2024-45874

Vulnerability: CVE-2024-45874 affects VegaBird Vooki 5.2.9. Risk arises from DLL hijacking by placing a crafted DLL in the same directory as Vooki.exe, enabling arbitrary code execution and potential persistence. Affected component is the Vooki application (VegaBird Vooki 5.2.9); root cause is lo...

9.8CVSS8AI score0.00726EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/07 12:0 a.m.18 views

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

7.7AI score0.00726EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/10/07 12:0 a.m.35 views

CVE-2024-45873

A DLL hijacking vulnerability in VegaBird Yaazhini 2.0.2 allows attackers to execute arbitrary code / maintain persistence via placing a crafted DLL file in the same directory as Yaazhini.exe...

0.00726EPSS
SaveExploits1References1
Wired Threat Level
Wired Threat Level
added 2024/10/05 1:30 p.m.11 views

Stealthy Malware Has Infected Thousands of Linux Systems for Years

Perfctl malware is hard to detect, persists after reboots, and can perform a breadth of malicious activities...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.10 views

PT-2024-12430 · Apache · Apache Rocketmq

Name of the Vulnerable Software and Affected Versions: Apache RocketMQ affected versions not specified Description: The issue concerns a stealthy malware named perfctl, which targets millions of Linux servers. It exploits over 20,000 common misconfigurations and a critical vulnerability in Apache...

7.2AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/02 7:58 a.m.8 views

Malicious code in cookie_info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f3a1b3ca5e526deb6d9a3b3dcb7b1282b006b8b1cf445c9c1b824162b719d26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/30 12:0 a.m.7 views

PT-2024-31826 · Vegabird · Vegabird Vooki

Name of the Vulnerable Software and Affected Versions: VegaBird Vooki version 5.2.9 Description: A DLL hijacking issue allows attackers to execute arbitrary code and maintain persistence by placing a crafted DLL file in the same directory as Vooki.exe. This enables attackers to potentially gain...

9.8CVSS8.1AI score0.00726EPSS
SaveExploits1References8
Packet Storm
Packet Storm
added 2024/09/30 12:0 a.m.1282 views

VegaBird Yaazhini 2.0.2 DLL Hijacking

==================================== CVE ID: CVE-2024-45873 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Free Android APK & API Vulnerability ScannerYaazhini Vulnerability Type: DLL Hijacking ==================================== ==================================== Summary...

7.4AI score0.00726EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2024/09/30 12:0 a.m.1147 views

VegaBird Vooki 5.2.9 DLL Hijacking

==================================== CVE ID: CVE-2024-45874 Author: Iulian Florea Vendor: VegaBird Product: Vooki - Dynamic Web Application & REST API Vulnerability Scanner DAST Tool Vulnerability Type: DLL Hijacking ==================================== ==================================== Summar...

7.4AI score0.00726EPSS
SaveExploits1
Rows per page
Query Builder