Lucene search
+L

2315 matches found

Node.js
Node.js
added 2019/05/06 2:7 p.m.15 views

Malicious Package

Overview All versions of momen typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:5 p.m.15 views

Malicious Package

Overview All versions of asycn typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:5 p.m.19 views

Malicious Package

Overview All versions of asnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:4 p.m.14 views

Malicious Package

Overview All versions of aasync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:4 p.m.18 views

Malicious Package

Overview All versions of asyync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:3 p.m.13 views

Malicious Package

Overview All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:3 p.m.15 views

Malicious Package

Overview All versions of asymc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:2 p.m.13 views

Malicious Package

Overview All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 2:2 p.m.21 views

Malicious Package

Overview All versions of wepack-cli typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether t...

6.6AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2019/05/06 1:56 p.m.18 views

Malicious Package

Overview All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
The Hacker News
The Hacker News
added 2019/04/16 7:14 a.m.2 views

Scranos: New Rapidly Evolving Rootkit-Enabled Spyware Discovered

A new powerful rootkit-enabled spyware operation has been discovered wherein hackers are distributing multifunctional malware disguised as cracked software or trojanized app posing as legitimate software like video players, drivers and even anti-virus products. While the rootkit malware—dubbed...

6.6AI score
SaveExploits0
OSV
OSV
added 2019/04/08 6:29 p.m.8 views

CVE-2019-10845

An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent,...

6.5CVSS6.6AI score0.02541EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/04/08 4:32 p.m.25 views

CVE-2019-10676

An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this product, a pop-up window will appear prompting the user if they want to save this new password. This pop-up window will persist on any page the user enters within t...

6.3AI score0.02706EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2019/03/29 12:27 p.m.115 views

Commando VM — Turn Your Windows Computer Into A Hacking Machine

FireEye today released Commando VM, which according to the company, is a "first of its kind Windows-based security distribution for penetration testing and red teaming." When it comes to the best-operating systems for hackers, Kali Linux is always the first choice for penetration testers and...

1.5AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/28 8:30 p.m.23 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2019-4080)

Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

6.8CVSS2.7AI score0.03125EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/26 5:45 p.m.24 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2019-4036)

Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

7.5CVSS2.7AI score0.0322EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/21 5:15 p.m.16 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1902)

Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

4.3CVSS2.6AI score0.01475EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/03/21 5:15 p.m.49 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-4030)

Summary WebSphere Application Server is shipped with WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

7.5CVSS2.2AI score0.01168EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2019/03/21 4:1 p.m.29 views

CVE-2019-5417

A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server...

7.5CVSS7.5AI score0.0221EPSS
SaveExploits1References1
NVD
NVD
added 2019/03/21 4:1 p.m.31 views

CVE-2019-5416

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server...

7.5CVSS7.5AI score0.0221EPSS
SaveExploits1References1
Rows per page
Query Builder