Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. Th...

Malicious code in heft-web-rig-library-tutorial (npm)

Source: ossf-package-analysis 5305ed5a8b702f1ebff37fd77c6a498586782cc76fa0f351f18c6ad13efdd194 The OpenSSF Package Analysis project identified 'heft-web-rig-library-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in heft-minimal-rig-test (npm)

Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in decoupled-local-node-rig (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 25f0aee1e117152ac6f4bf01df0fc766d85a482953feea9fdece74e016a3cc65 The OpenSSF Package Analysis project identified 'decoupled-local-node-rig' @ 9.1.1 npm as malicious. It is considered malicious...

MAL-2026-2979 Malicious code in tsdoc-build-rig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9483578294aa1f05417210a36c0840de9fe1104aa1c36c6cad6f0ac4fe4760 The package tsdoc-build-rig was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in tsdoc-build-rig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9483578294aa1f05417210a36c0840de9fe1104aa1c36c6cad6f0ac4fe4760 The package tsdoc-build-rig was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2024-45719

Malicious code in bioql PyPI...

MAL-2025-41380 Malicious code in decoupled-local-node-rig (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25f0aee1e117152ac6f4bf01df0fc766d85a482953feea9fdece74e016a3cc65 The OpenSSF Package Analysis project identified...

Malicious code in decoupled-local-node-rig (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25f0aee1e117152ac6f4bf01df0fc766d85a482953feea9fdece74e016a3cc65 The OpenSSF Package Analysis project identified...

Malicious code in heft-minimal-rig-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41293 Malicious code in heft-minimal-rig-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in heft-web-rig-library-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5305ed5a8b702f1ebff37fd77c6a498586782cc76fa0f351f18c6ad13efdd194 The OpenSSF Package Analysis project identified 'heft-web-rig-library-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...

MAL-2025-41296 Malicious code in heft-web-rig-library-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5305ed5a8b702f1ebff37fd77c6a498586782cc76fa0f351f18c6ad13efdd194 The OpenSSF Package Analysis project identified 'heft-web-rig-library-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...

Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware

An Iran-aligned hacking group has been attributed to a new set of cyber attacks targeting Kurdish and Iraqi government officials in early 2024. The activity is tied to a threat group ESET tracks as BladedFeline , which is assessed with medium confidence to be a sub-cluster within OilRig, a known...

CVE-2024-51927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asaduzzaman Abir Rig Elements For Elementor rig-elements allows DOM-Based XSS.This issue affects Rig Elements For Elementor: from n/a through = 1.0...

CVE-2024-51927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asaduzzaman Abir Rig Elements For Elementor rig-elements allows DOM-Based XSS.This issue affects Rig Elements For Elementor: from n/a through = 1.0...

CVE-2024-51927

CVE-2024-51927 is linked to Rig Elements For Elementor (WordPress plugin). Connected sources indicate an authenticated, DOM-based Cross-Site Scripting vulnerability in Rig Elements For Elementor, affecting versions up to 1.0 (auth+ requirement implied). The issue arises from improper input handli...

CVE-2024-51927 WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asaduzzaman Abir Rig Elements For Elementor rig-elements allows DOM-Based XSS.This issue affects Rig Elements For Elementor: from n/a through = 1.0...

PT-2024-35059 · Elementor · Codember Rig Elements For Elementor

Name of the Vulnerable Software and Affected Versions: Codember Rig Elements For Elementor versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject...

WordPress plugin Rig Elements For Elementor has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...