Lucene search
K

8 matches found

OSV
OSV
added 2022/07/20 2:38 p.m.7 views

MAL-2022-5723 Malicious code in redox-phone-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de8068327d3a4c7a9da434d81a434af1140129169e3f56565d519fdf4ed080a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/20 2:38 p.m.2 views

Malicious code in redox-phone-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9de8068327d3a4c7a9da434d81a434af1140129169e3f56565d519fdf4ed080a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Snyk
Snyk
added 2022/07/12 8:6 a.m.2 views

Malicious Package

Overview redox-phone-support is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

9.8CVSS7.1AI score
Exploits0References3
Huntr
Huntr
added 2021/11/10 4:0 a.m.10 views

Cross-site Scripting (XSS) - Stored in eventum/eventum

Description Multiple Stored XSS in Administration at eventum 3.10.8 Proof of Concept // PoC.payload " Step to Reproduct Goto Administration Areas and choose to feature below Manage News Input payload into fieldTitle Manage Status Input payload into fieldTitle Manage Projects Input payload into...

6AI score
Exploits0References1
ThreatPost
ThreatPost
added 2020/10/08 1:0 p.m.31 views

Amazon Prime Day Spurs Spike in Phishing, Fraud Attacks

Cybercriminals are tapping into Amazon’s annual discount shopping campaign for subscribers, Prime Day, with researchers warning of a recent spike in phishing and malicious websites that are fraudulently using the Amazon brand. There has been a spike in the number of new monthly phishing and...

7.2AI score
Exploits0References10
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.40 views

Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2014/02/17 12:0 a.m.15 views

Fedora Update for zarafa FEDORA-2014-1883

Check for the Version of zarafa OpenVAS Vulnerability Test Fedora Update for zarafa FEDORA-2014-1883 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

5CVSS0.3AI score0.00734EPSS
Exploits0References2
Fedora
Fedora
added 2014/02/15 8:4 p.m.21 views

[SECURITY] Fedora 19 Update: zarafa-7.1.8-1.fc19

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

5CVSS1.6AI score0.00734EPSS
Exploits0
Rows per page
Query Builder