Malicious code in @diotoborg/exercitationem-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4a181723ba2ff9df4ea976b7cb5405a17ca9b7e949877ccc329ddcdea9d316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/occaecati-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5e777faebf47bc26816539986c6201c0bed936306739e2a2fe207a15b5a4b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d040370140af8f1fdf35233a8d44ade81b7c8c3561be0b8d4e3788a23a0882a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ex-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e30f0f24bcabf5b6bce5083307e9ba4d5f6aadd051592bbf5f715d455792651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquam-sit-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6b2f3b6d1068d05ee0c4e214957377943139fbbdfaa14226509d6d609844ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolor-earum-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d700c9e6da7b84a19b42ed2466b0fe8ba51b97a24f185d84dd039164ff501398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/vel-labore-incidunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a51e7a3e943bacf0ec4e05fabbc4d63cd9366774a2777611041e9163b322c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Regsvr32.exe (.sct) Command Delivery Server

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Regsvr32.exe .sct Command Delivery Server', 'Description' = %q This module uses the Regsvr32.exe Application Whitelisting Bypass technique as a w...

Insecure Direct Object Reference (IDOR)

in2code/powermail is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient validation of the mail parameter in the confirmationAction of the Powermail extension, allowing an unauthenticated attacker to display user-submitted data of all forms persisted by t...

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. "The attacks involve threat actors that employ methods such as the deployment of shel...

Malicious code in copilot-web-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb28669371353c111a05f7fb6bb2803179610b8ccec893590a34d2343e90fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cff4fab9afd0251fc2a7551653c7605a21ecffc47bcfee194740e479aff3979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-messages-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566f2539409828163b03e79534cea7b15424dcda3b8ad2435ab9deba555757e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Powermail TYPO3 extension Broken Access Control in the OutputController

An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configuration of the Powermail Frontend plugins...

Malicious code in @digital-experience/product (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c435487f72fee4bd3fad67cf95fb62296a2a78c8e5f4079e9e40dd35493753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Linux Malware 'sedexp' Hides Credit Card Skimmers Using Udev Rules

Cybersecurity researchers have uncovered a new stealthy piece of Linux malware that leverages an unconventional technique to achieve persistence on infected systems and hide credit card skimmer code. The malware, attributed to a financially motivated threat actor, has been codenamed sedexp by Aon...

BIT-VALKEY-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The problem is fixed in Redis version 7.0.10...

BIT-KEYDB-2021-32762 Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis librar...