516 matches found
quasar-app-webpack-json5-vulnerability
App Quasar quasar-app-webpack-json5-vulnerability Un progetto Quasar Installa le dipendenze root@kitploit: yarn or npm install Avvia l'app in modalità sviluppo ricarica a caldo, segnalazione errori, ecc. root@kitploit: quasar dev Controlla i file con il linter root@kitploit: yarn lint or npm run...
quasar
Quasar Quasar è un framework di raccolta informazioni per penetration tester, codificato da Belahsan Ouerghi Informazioni sul sito web Controllo indirizzi email Informazioni sul numero di telefono Controllo BIN carta di credito Localizzatore IP Scanner di porte Installazione root@kitploit: sudo...
Quasar
Quasar Strumento di amministrazione remota gratuito e open-source per Windows Quasar è uno strumento di amministrazione remota veloce e leggero codificato in C. L'utilizzo spazia dal supporto agli utenti, attraverso il lavoro amministrativo quotidiano, fino al monitoraggio dei dipendenti. Offrend...
CVE-2026-73647
creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:03+00:00| published-proof-of-concept| https://github.com/quasarframework/quasar/security/advisories/GHSA-3r53-75j5-3g7j...
CVE-2026-73647
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
CVE-2026-73647
The vulnerability CVE-2026-73647 affects Quasar Framework prior to version 2.22.0. The public extend() utility in ui/src/utils/extend/extend.js recursively copies attacker-controlled keys during deep merges (extend(true, target, source)) and does not reject an own proto property. This could cause...
EUVD-2026-58189
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
CVE-2026-73647 Quasar Framework: Prototype pollution in Quasar extend() utility
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
CVE-2026-73647 Quasar Framework: Prototype pollution in Quasar extend() utility
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
@bedrock/quasar (10.0.1), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +10 more potentially affected by CVE-2026-73647 via quasar (>=2.0.0-beta.1, <=2.18.6)
quasar NPM version =2.0.0-beta.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-73647 Source advisory: OSV:GHSA-3R53-75J5-3G7J...
Quasar: Prototype pollution in the extend() utility
Summary [email protected], the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the public extend utility exported from the package root. When extendtrue, target, source is used for a deep merge, attacker-controlled object keys are recursively...
GHSA-3R53-75J5-3G7J Quasar: Prototype pollution in the extend() utility
Summary [email protected], the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the public extend utility exported from the package root. When extendtrue, target, source is used for a deep merge, attacker-controlled object keys are recursively...
Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
A previously undocumented Linux implant codenamed Quasar Linux RAT QLNX is targeting developers' systems to establish a silent foothold as well as facilitate a broad range of post-compromise functionality, such as credential harvesting, keylogging, file manipulation, clipboard monitoring, and...
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
TrendAI™ Research breaks down Quasar Linux QLNX, a previously undocumented sophisticated Linux RAT with low detection rates. In this blog, we examine a full-featured Linux threat incorporating a rootkit, a PAM backdoor, credential harvesting, and more, revealing how this malware enables stealthy...
Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware
Security experts have disclosed details of an active malware campaign that's exploiting a DLL side-loading vulnerability in a legitimate binary associated with the open-source c-ares library to bypass security controls and deliver a wide range of commodity trojans and stealers. "Attackers achieve...
Space Bears Ransomware Claims Comcast Data Theft Through Quasar Breach
Space Bears ransowmare claims it obtained Comcast files through a breach at Quasar Inc, with threats to publish the data and separate leaks promised from Quasar itself...
Malicious code in xenon-command-futurology-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quasar-backend-altair-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...