3718 matches found
MAL-2022-4901 Malicious code in nodehound (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3452e36613de0e1ffc90442e82f80c075ed40c08ce45aaf37ae022a943e89045 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-arm-privatedns-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72035eff5b92aa316c5274089d2be8ef3bc78986323098bddb3f1e77da75c151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-192 Malicious code in @cybernated/core-ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583d74dfe9c810d3ddd6e71a070b7a29cea19002f5505e8cf0406110d7fc67cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4553 Malicious code in meoconlonton-vhx-cricle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74e46219c746f5ca66a9837373c50e7039b60c93dc0b1a32e9de119138af4dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2673 Malicious code in edx_cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 651bcc00eef6a83ca831cab2962343cafdbadda9d8ab6d5031e2c2d0eb8917b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7359 Malicious code in youla-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b6fd2538a87fd893e2acb253f72093c7d1b5b6eace2522148a601114b12c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3485 Malicious code in grunt-with-node-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0946d8ce554c4342a4ca8846ecb6a66703712bbf720809ce3fdfade36925b648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-709 Malicious code in @vpnarea/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5f726172cbada6be8c4f49696d47b8879077a8e8ed3c3eb065e1ed126ba9833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-425 Malicious code in @mcdonalds/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 209f892cf75f1cd8b9b0f27ea42f702cb0e669736268cccae4725e21136d87b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @impresscms/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aaf5018cdf58393a3c22158c2784504059026f2b4f2a9a9bb374fdcace9fe8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-347 Malicious code in @igame/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8233e06196315116860caa0cf4397b101b5b88de85c44d6fb6263766a32df3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2917 Malicious code in exjswrtrilypbhn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 832a9630eb8b90d31b6de314c158d3dc641e80e0dafea8cc541480d6001f3431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1614 Malicious code in blockchain-wallet-ios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115182d6218da72cd6f3f3460eadba87a00de07f6df9bca534a220605fd26c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BitTorrent uTorrent 安全漏洞
BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. A security vulnerability exists in BitTorrent uTorrent that stems from some unknown functionality of the component JSON RPC server. A remote attacker could exploit the vulnerability to...
AXIS Network cameras 安全漏洞
AXIS Network cameras are webcams from the Swedish company AXIS. A security vulnerability exists in AXIS Network cameras P1204, P3225, P3367, M3045, M3005, and M3007, which stems from improper privilege management in component CGI scripts...
Ransomware Group Debuts Searchable Victim Data
Cybercrime groups that specialize in stealing corporate data and demanding a ransom not to publish it have tried countless approaches to shaming their victims into paying. The latest innovation in ratcheting up the heat comes from the ALPHV/BlackCat ransomware group, which has traditionally...
Kaiser Permanente Exposes Nearly 70K Medical Records in Data Breach
Kaiser Permanente suffered a data breach due to email compromise on April 5 that potentially exposed the medical records of nearly 70,000 patients, the company revealed earlier this month. Attackers gained access to the emails of an employee at Kaiser Foundation Health Plan of Washington that...
phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: phpIPAM 1.4.5 - Remote Code Execution RCE Authenticated Date: 2022-04-10 Exploit Author: Guilherme '@behiNdyk1' Alves Vendor Homepage: https://phpipam.net/ Software Link: https://github.com/phpipam/phpipam/releases/tag/v1.4.5 Version: 1.4.5 Tested on: Linux Ubuntu 20.04.3 LTS...
ownCloud 安全漏洞
ownCloud is a suite of personal cloud storage solutions from US-based ownCloud, Inc. A security vulnerability exists in versions of ownCloud prior to 10.10.0 that stems from incorrectly deleting sensitive information prior to storage or transmission...
