CVE-2022-31479

An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which...

Puwr - SSH Pivoting Script For Expanding Attack Surfaces On Local Networks

Easily expand your attack surface on a local network by discovering more hosts, via SSH. Using a machine running a SSH service, Puwr uses a given subnet range to scope out IP's, sending back any successful ping requests it has. This can be used to expand out an attack surface on a local network, ...

COM-Hunter - COM Hijacking VOODOO

COM Hijacking VOODOO COM-hunter is a COM Hijacking persistnce tool written in C. This tool was inspired during the RTO course of @zeropointsecltd Features Finds out entry valid CLSIDs in the victim's machine. Finds out valid CLSIDs via Task Scheduler in the victim's machine. Finds out if someone...

Insufficient Session Expiration

Description The application NocoDB failed to invalidate the session after changing the password and In this scenario changing the password doesn't destroy the other sessions which are logged in with old passwords. Proof of Concept Login same account in two different browsers. Try to change the...

Malicious code in volcan0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ab3b6308934f22dd68a9a70e89a6d2c047ae41a45e55e1db7a9c92eaa5fedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bounty-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80028b7efd67458fe4d402b82e87526778a2276963829161633e17193ad92e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pocjenkircetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbf04e7a39de82685b8e0cb1fc6ad03deb085f0db3630624a3b736b99d0a7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in titles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abd4ff58249068e7da5354d6c1c536d8d1c88de26e977798b1965f29fb3d91bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in support-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a7a9b6a19738c6365da05b9f924a8b72b92ee79904ca65ce153b5563996b183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rkpacktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e155982820eba462dcbfa1616d8d13143172fae3248f9487a1d66ecfb674aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colourize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ad437eef591c8b1542e4b5bfda0ecd1adca3b3baec266f4d8e9abfaaf6e660 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csdn-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deec9b7e940376980cf54f78695f6b5e89bdbcfa2afa4b705397b492ad815343 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in woocommerce-infinitepay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb3742de26f34528832b7b1ab7ac1e502dbe17ef3e8ec318b1444590a4a003f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nginxconfig.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 400e870471def5cb533f443425f9af880d3f5df7783baba1b0ea3f8b22343abc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mes-bah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711fc50ffab5cdf3d8c553d2254216d5eb19a0fce4139d63949183ab0fd8527c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maddysmith-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d628a677acbf07d4b86ccff9a8dcc3baefdfa6b86078f7781b4fff83c6e5d24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gpsu/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82441bd6e09a70f9652399e745df409dbf2bbf07d483ecc2d1f343774ac43fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whjr-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9dce9c9aaa9e383fef4277d3ac40c8e55558803e648049e419c0f3370b4cec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oms-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fc10a735991e54e1553bcd8bc1c4041ec2456c5e47cc64291bd5ea3931e5c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coolqueue.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b45bcc81654cdbe4ea3a6b5cc20f01160efe2d1b174f54299a4c4a8a65670f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...