Malicious Package

Overview target-campaign-library is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

PVS-1912 - Write cache redirected to server

Write cache redirected to PVS server during PVS Target Boot...

Malicious code in target-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c59506677724de632647df0aebc8466731cbfc6befe523baf29864ba6623e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6420 Malicious code in target-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c59506677724de632647df0aebc8466731cbfc6befe523baf29864ba6623e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6419 Malicious code in target-global-mbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c454857fbb475e3cdc8810d6ff28bf9d3b69a804386050c090292fa056fc5035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @audi-cct/teaser-feature-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4bf5b9b172fa13a666e247c29ea5993af008cf7b6371aa719add1ac288724f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-VVV8-XW5F-3F88 Prototype Pollution in mout

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

Security updates for Adobe InDesign June 2022

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Adobe has released security updates in Adobe InDesign that addresses critical vulnerabilities at priority 3 as per Adobe. These vulnerabilities could lead to arbitrary code execution on target systems, i...

HTTP User Agent Remote Code Execution

HTTP headers let the client and the server pass arbitrary information with an HTTP request User Agent field. A remote attacker may use the User Agent header to run arbitrary code on an affected target...

Buffer overflow

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29...

CVE-2022-31482 Denial-of-Service via internal structure overflow

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29...

Carrier LenelS2 HID Mercury access panels OS command injection vulnerability

Carrier LenelS2 HID Mercury access panels is a controller panel from Carrier, U.S.A. An operating system command injection vulnerability exists in Carrier LenelS2 HID Mercury access panels, which could be exploited by an attacker to pass specially crafted data to an application and execute...

Validation Bypass

bottle is vulnerable to validation bypass. The library mishandles errors in handle function during early request binding, allowing an attacker to compromise the target system...

Able to get LP tokens without spending any funds in FeeBurner.sol

Lines of code FeeBurner.solL43-L88 Vulnerability details Impact In the burnToTarget function, if the tokens array has only a zero address token and msg.value is 0 then FeeBurner.sol would still call the swapAll function and use all WETH held in the contract. If the contract has any WETH, the call...

Notionterm - Embed Reverse Shell In Notion Pages

Embedreverse shell in Notion pages. Hack while taking notes FOR: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable reverse shell...

CVE-2021-34081

OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository...

UBUNTU-CVE-2021-34081

OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-06864)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing HTML content. An attacker could exploit this vulnerability to execute arbitrary code o...

Job Writing to Cloud Connect Repository Fails with: "Target gate has rejected connection. Connection target is not recognized. No rule exists."

Challenge A Veeam Cloud Service Provider observes that their tenant's jobs intermittently fail with either of the following errors: Error Cloud gate has rejected connection. Reason: Connection target is not recognized. No rule exists.. System.Exception Error Connection target is not recognized. N...