Malicious code in @immersive-composer/backend-resources-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46be4d1d5f47338da956e735c11099f0e63650fba283931bbfa69dd6fdc8427d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-353 Malicious code in @immersive-composer/backend-resources-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46be4d1d5f47338da956e735c11099f0e63650fba283931bbfa69dd6fdc8427d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-712 Malicious code in @w3-commons/js-build-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7872915f84a85c03dfe50e7b7cef0787845ceaad3aac20ea1c20b7a844eb01e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-5486-1: Intel Microcode vulnerabilities

It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service. CVE-2021-0127 Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could u...

CVE-2022-2134 Allocation of Resources Without Limits or Throttling in inventree/inventree

Allocation of Resources Without Limits or Throttling in GitHub repository inventree/inventree prior to 0.8.0...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

PT-2022-10008 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the File Server Resource Manager, a component of the Microsoft Windows operating system, allows a perpetrator to increase their privileges.

The vulnerability of the File Server Resource Manager in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

PT-2022-10009 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

The vulnerability of the Windows Hyper-V hardware virtualization system for Windows operating systems arises from synchronization errors when using shared resources (“Race Conditions”). This allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Hyper-V hardware virtualization system for Windows operating systems arises from synchronization errors when using shared resources (“Race Conditions”). This allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Bluetooth driver for Microsoft Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the connection processing function in Cisco Firepower Threat Defense’s microprogrammed network interface devices allows a attacker to trigger a service failure.

The vulnerability of the connection processing function in Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending...

Bypass filter - Stored XSS in Resources

Description Website does incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Proof of concept javaSCRIPTalertorigin Steps to reproduce it works on Firefox not in chromium based browsers 1.Go to...

Linking for Confluence 跨站脚本漏洞

Linking for Confluence is enabling one-click linking to access Confluence templates, aggregate resources, and create structured content. A security vulnerability exists in Linking for Confluence version 5.5.7, which can be exploited by an attacker to remotely launch a cross-site scripting attack...

AzureRT - A Powershell Module Implementing Various Azure Red Team Tactics

Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based command...