CVE-2022-20456

In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Malicious code in attacker_present_helloworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9129d8a2299c74952dd32fde1d04f17434b86d0ac21e4ec06d5bedd681db53b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-12652 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings due to resource exhaustion in multiple functions of AutomaticZenRule.java. This could lead to local...

PT-2023-12646 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings due to resource exhaustion in the AutomaticZenRule of AutomaticZenRule.java. This could lead to local...

CVE-2022-20492

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-35977

Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SETRANGE and SORTRO commands can trigger an integer overflow, resulting with Redis attempting to allocate impossible amounts of memory and abort with an out-of-memory OOM panic. The problem is fixe...

CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-service

Redis is an in-memory database that persists on disk. Authenticated users can issue a HRANDFIELD or ZRANDMEMBER command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not...

CVE-2020-22655

CVE-2020-22655 affects multiple Ruckus devices, including R310/R500/R600/T300/T301n/T301s (firmware 10.5.1.0.199) and various SmartCell Gateway/SmartZone/ZoneDirector/vSZ products. The known issue is a vulnerability that allows attackers to persistently write unauthorized system images. Affected ...

PT-2023-2888 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader versions 12.02 through 12.1.0 Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability, where the targ...

Malicious code in speedtestbom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa2e88e47afde3b0767452c2eca1525a62e5abb314460bb92decc396c6b5a78f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedgum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 748d25d95239ceb6afd4a14393414feb60155ca03b5b3f191b0facbfc8e10e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trova (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b32a84321a61403ac34fd403ba1b065aee99e646ea6d51e4b9f4ebd13d49da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prathmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463a1fff2f77680560596dbe40c47204ae5c79228c5dad33399f9fdd4441c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hunting for signs of persistence in the cloud: an IR guide following the CircleCI incident

Learn how to detect malicious persistence techniques in AWS, GCP & Azure after potential initial compromise, like with the CircleCI incident...

Malicious code in everstake.one (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28abdd3e255919265b3c31fe76622c4b487b9bb26f98f9abb19f3f945e7bb5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ftx.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5135d751992b5d4c6a940cfaf74fe516bcb12b50bdcb801313933da407c5a33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...

CVE-2022-43529

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to...