99 matches found
GHSA-V99V-XGJX-7M7G Malicious Package in asnyc
All versions of asnyc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...
Managed Defense: The Analytical Mindset
When it comes to cyber security managed services or otherwise, you’re ultimately reliant on analyst expertise to keep your environment safe. Products and intelligence are necessary pieces of the security puzzle to generate detection signal and whittle down the alert chaff, but in the end, an...
Malicious Package
Overview All versions of equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
Malicious Package
Overview All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
Malicious Package
Overview All versions of requuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
Malicious Package
Overview All versions of requesst typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
Malicious Package
Overview All versions of exprss typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
openSUSE Security Update : python-cryptography / python-pyOpenSSL (openSUSE-2019-1104)
This update for python-cryptography, python-pyOpenSSL fixes the following issues : Security issues fixed : - CVE-2018-1000808: A memory leak due to missing reference checking in PKCS12 store handling was fixed bsc1111634 - CVE-2018-1000807: A use-after-free in X509 object handling was fixed...
Security update for python-cryptography, python-pyOpenSSL (important)
openSUSE Security Update: Security update for python-cryptography, python-pyOpenSSL Announcement ID: openSUSE-SU-2019:1104-1 Rating: important References: 1021578 1052927 1111634 1111635 1119077 Cross-References: CVE-2018-1000807 CVE-2018-1000808 Affected Products: openSUSE Leap 42.3 An update th...
CVE-2018-8637
creationtimestamp| type| source ---|---|--- 2019-02-01 12:53:41+00:00| seen| MISP/5c543c87-503c-4622-a292-0aa6ac12042b 2020-10-09 15:53:03+00:00| seen| MISP/0b0f374b-39b1-4229-891b-2defd31fe736 2025-01-28 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lgte2hk2t42b...
HackerOne: Harvesting all private invites using leave program fast-tracked invitation and security@ email forwarding feature
Hi HackerOne, Summary: I have found a way that it is possible to harvest all private invitation using the new Leave Program feature together with the security@ email forwarding feature without any user interaction. --- Description: First, when the program activated the security@ email forwarding ...
CVE-2017-11826
creationtimestamp| type| source ---|---|--- 2017-10-11 16:30:10+00:00| exploited| https://t.me/informationsecuritychannel/9851 2017-10-12 11:04:08+00:00| exploited| https://t.me/informationsecuritychannel/9892 2017-11-09 20:56:42+00:00| published-proof-of-concept| https://t.me/canyoupwnme/2608...
CVE-2011-3478
creationtimestamp| type| source ---|---|--- 2012-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19407 2015-11-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38599 2025-04-22 13:35:26+00:00| seen|...
File is locked by running session
Challenge A job or task within Veeam Backup & Replication displays the following message: File is locked by running session jobname Cause When tasks run in Veeam Backup & Replication, the files accessed by those tasks are tracked within the configuration database to prevent collision. As tasks ar...
SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113
This security advisory describes a BIND 8 and BIND 9 vulnerability which allows remote attackers to spoof DNS traffic using cache poisoning techniques against recursive resolvers. With the exception of FirePass, the F5 products listed as affected in this security advisory run a version of BIND th...
NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nsbypass.php Blind SQL Injection Exploit ============================================================== !/usr/bin/php -victim Opts Options: -isadmin Is the...
MSWordPW.txt
Hi ... There are several vulnerabilities published/discussed regarding MS Word MS Office in general, however, 'tis is the most "no brainer" I've discovered ... Vulnerability: Password protected document that has "tracked changes, comments or forms" password protected Vulnerable: MS Word Win2K/XP...
