Malicious code in rocket-league-credits-hakc-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07de2630bcb7a21cf1f16c9305bb3ed4f5df54d95924e14da883d3c9e71c1899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Xxe

ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...

CVE-2021-45025

CVE-2021-45025 affects ASG-Zena Cross Platform Server Enterprise Edition 4.2.1, where sensitive information is stored in cookies in cleartext, enabling information disclosure. Impact and fix details are supported by multiple sources (NVD/CNVD/CVE pages) and connected advisories. Remediation per s...

CVE-2021-45024

CVE-2021-45024 affects ASG-Zena Cross Platform Server Enterprise Edition 4.2.1. The connected documents describe an XML External Entity (XXE) vulnerability in the XML import handling that can lead to SSRF and data exfiltration via the server (endpoints such as oc_main/zenaweb/scheduler/operation)...

Exploit for Improper Restriction of XML External Entity Reference in Rocketsoftware Ags-Zena

Zena Housekeeping notes: The original CookieMonster Repo can b...

Newly patched VMware vulnerability exploited by Iranian espionage group, Rocket Kitten

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here An Iranian cyber espionage gang known as Rocket Kitten has began delivering the Core Impact penetration testing tool on susceptible computers by exploiting a newly fixed severe vulnerability in VMware Workspace ONE...

Jenkins RocketChat Notifier Plugin 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins RocketChat Notifier Plugin 1.4.10...

WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Rocket Maintenance Mode & Coming Soon Page plugin versions = 4.2. Solution Update the WordPress Rocket Maintenance Mode & Coming Soon Page plugin to the latest available version at least 4.3...

WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin versions = 1.0.1. Solution No patched version available...

WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Rocket Addons – Conditional logic and form addons for Elementor Pro plugin versions = 1.0.1. Solution No patched version available...

WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Rocket Maintenance Mode & Coming Soon Page plugin versions = 4.2. Solution Update the WordPress Rocket Maintenance Mode & Coming Soon Page plugin to the latest available version at least 4.3...

Rocket LMS 1.1 - Persistent Cross Site Scripting Vulnerability

Exploit Title: Rocket LMS 1.1 - Persistent Cross Site Scripting XSS Document Title: =============== Rocket LMS 1.1 - Persistent Cross Site Scripting XSS Product & Service Introduction: =============================== Rocket LMS is an online course marketplace with a pile of features that helps yo...

Rocket LMS 1.1 - Persistent Cross Site Scripting (XSS)

Exploit Title: Rocket LMS 1.1 - Persistent Cross Site Scripting XSS Exploit Author: Vulnerability-Lab Date: 29/12/2021 Document Title: =============== Rocket LMS 1.1 - Persistent Cross Site Scripting XSS References Source: ====================...

PT-2022-15164 · Intel +1 · Intel Processors +1

Name of the Vulnerable Software and Affected Versions: Intel processors based on Sunny Cove microarchitecture, including Ice Lake Xeon-SP, Ice Lake D, Gemini Lake, Ice Lake U, Y, and Rocket Lake Description: An elevation-of-privilege issue allows attackers to affect the system. The problem, known...

Rocket LMS 1.1 Cross Site Scripting

Document Title: =============== Rocket LMS v1.1 - History Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2305 Release Date: ============= 2021-12-29 Vulnerability Laboratory ID VL-ID: ==================================== 23...

Rocket LMS v1.1 - (History) Persistent XSS Vulnerability

Document Title: =============== Rocket LMS v1.1 - History Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2305 Release Date: ============= 2021-12-29 Vulnerability Laboratory ID VL-ID: ==================================== 23...

Rocket.Chat 跨站脚本漏洞

Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions prior to Rocket.Chat 3.9, which stems from an issue with the rendering of the application's link previews that could lead to potential XSS attacks...

Hackers hit Russian ministry, rocket center using MSHTML vulnerability

By Waqas Microsoft Office zero-day also dubbed MSHTML attack exploited to target Russian government including Interior ministry and State Rocket Center. This is a post from HackRead.com Read the original post: Hackers hit Russian ministry, rocket center using MSHTML vulnerability...

MSHTML attack targets Russian state rocket centre and interior ministry

Malwarebytes has reason to believe that the MSHTML vulnerability listed under CVE-2021-40444 is being used to target Russian entities. The Malwarebytes Intelligence team has intercepted email attachments that are specifically targeting Russian organizations. The first template we found is designe...

admin (=0.1.1), amiwo (>=0.0.1 <=0.2.3) +207 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6 <=0.4.11)

rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =3.5.0, =0.8.0, =0.10.0, =0.16.0, =0.3.0, =0.4.0 - automaat-server =0.1.0 - aw-client-rust =0.1.0 - aw-datastore =0.1.0 - aw-query =0.1.0 - aw-server =0.8.0 - aw-sync =0.1.0 - aw-transform =0.1.0 and more Source cves: CVE-2021-29935 Source advisory:...