8 matches found
MAL-2022-5723 Malicious code in redox-phone-support (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de8068327d3a4c7a9da434d81a434af1140129169e3f56565d519fdf4ed080a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redox-phone-support (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de8068327d3a4c7a9da434d81a434af1140129169e3f56565d519fdf4ed080a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview redox-phone-support is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...
Cross-site Scripting (XSS) - Stored in eventum/eventum
Description Multiple Stored XSS in Administration at eventum 3.10.8 Proof of Concept // PoC.payload " Step to Reproduct Goto Administration Areas and choose to feature below Manage News Input payload into fieldTitle Manage Status Input payload into fieldTitle Manage Projects Input payload into...
Amazon Prime Day Spurs Spike in Phishing, Fraud Attacks
Cybercriminals are tapping into Amazon’s annual discount shopping campaign for subscribers, Prime Day, with researchers warning of a recent spike in phishing and malicious websites that are fraudulently using the Amazon brand. There has been a spike in the number of new monthly phishing and...
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...
Fedora Update for zarafa FEDORA-2014-1883
Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1883 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 19 Update: zarafa-7.1.8-1.fc19
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...