Malicious code in supplyhub (npm)

The npm package supplyhub is a credential / SSH-key stealer. Its package.json declares a postinstall lifecycle hook postinstall: node postinstall.js that executes automatically on npm install, before the package is ever imported. postinstall.js uses fs.readFileSync to read the user's SSH private...

CVE-2016-3095

server/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated private key...

Moxa MXView Security Vulnerability

Moxa MXView is Moxa's network management software for configuring, monitoring and diagnosing network devices in industrial Ethernet networks. A security vulnerability exists in Moxa MXView version 2.8. The vulnerability can be exploited by a remote attacker to read the private key file of the web...

PT-2012-4828

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1 Description The issue arises from improper session management, specifically with key search requests. This could potentially allow remote attackers to read a private key under...