71 matches found
ghosthound
GhostHound GhostHound is a BloodHound OpenGraph extension for Active Directory. SharpHound and every other AD collector skip CN=Deleted Objects: deleted objects tombstones are invisible to standard BloodHound attack-path analysis, even though the AD Recycle Bin and tombstone reanimation mechanism...
Malicious Package
Overview @larocas-bbresearch/tombstone-probe-8ejnsa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview @larocas-bbresearch/tombstone-probe-live-z6xz56 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview @larocas-bbresearch/tombstone-probe-odvz5y is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
MAL-2026-16527 Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-16526 Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...
MAL-2026-16525 Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...
CVE-2026-76236
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
CVE-2026-76236 stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
CVE-2026-76236 stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
CVE-2026-76236 stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
EUVD-2026-62476
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
CVE-2026-76236
stigmem-node before 0.9.0a12 contains a cross-tenant BOLA flaw in its RTBF (right-to-be-forgotten) tombstone mechanism. Two defects combine: issue_tombstone defaulted the tenant to "default" instead of the caller's tenant, and the read-suppression path (_get_tombstone_filter and _tombstone_scope_...
CVE-2026-76236: Authorization Bypass Through User-Controlled Key
stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...
PT-2026-78417
Name of the Vulnerable Software and Affected Versions stigmem-node versions prior to 0.9.0a12 Description A broken object level authorization BOLA flaw exists in the right-to-be-forgotten RTBF tombstone mechanism. The issue tombstone function defaulted the tenant to "default" instead of the...
CVE-2026-54775
CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent...
CVE-2026-54775 CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent...