8805 matches found
Sicurezza-Informatica-Presentazione
What does this repository contain? This repository contains a brief research and presentation of the security flaw regarding XZ Utils for the UNIPR cybersecurity course CVE-2024-3094 Description of the flaw by Ubuntu: Malicious code was discovered in the upstream tarballs of xz, starting with...
Malicious code in mw-test-utils (npm)
mw-test-utils was published to npm on 2026-10-27 from 06:56:36 UTC by the account amahrou1w, about one minute after npm's staged-publish placeholder 0.0.0-stage, in versions 1.0.0, 10.0.0, 10.0.1. The three packages mw-test-utils, mw-communication-client and mui-wrapper-x-date-pickers were...
Report-XZ-Utils-CVE-2024-3094
Report-XZ-Utils-CVE-2024-3094 Hello, this is a report about the CVE-2024-3094, known as "XZ-Utils Backdoor". I wrote about how the attack begin and how it work, for this i search online sites and video explanation on youtube, wrote inside you can found the references. I'm available to correct any...
CVE-2024-3094-checker
CVE-2024-3094 Detection and Remediation Script This script is designed to detect and remediate a critical vulnerability, CVE-2024-3094, which affects the XZ Utils data compression library. The vulnerability was highlighted in a CISA Alert and has significant implications for system security. This...
CVE-2024-3094
xz-utils Vulnerability Check and Update Utility This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security...
Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-
Detect-Backdoor-in-liblzma-of-XZ-utils-CVE-2024-3094- The following YARA rule helps detect the presence of the backdoor in the compromised liblzma library on systems using versions 5.6.0 and 5.6.1 of the XZ compression tool. This provides a mechanism to identify vulnerable systems that could be...
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 Lab Environment Setup and Report CVE-2024-3094 Practice Reproduced the backdoor inserted in XZ Utils 5.6.0 and 5.6.1 in a lab environment, analyzing SSH authentication hooking status and risks. Environment Host OS : - Windows 11 Docker : Docker Desktop 28.0.1 Dockerfil...
twint-utils
twint-utils These are utilizations of Twint. Please check out our collaboration guidelines to contribute to these. Mutuals Detector Mufos.py uses Twint to detect a given seed accounts mutual followers. It can be incorporated into other more elaborate pipelines for social networks or millieu...
codehaus-plexus__plexus-utils_CVE-2017-1000487_3-0-15
This repository does not have a README...
XZ-Utils_CVE-2024-3094
Vulnerability Overview XZ is a data compression format present in almost every Linux distribution. liblzma is an open-source software library that handles XZ compression format. On March 29, developers discovered a supply chain attack on the XZ package, tracing it to a backdoor trojan implanted i...
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2024-56433
CVE-2024-56433 shadow-utils - Insecure default subordinate ID assignment for local users Summary The default subordinate ID assignment creates risk for collision with existing user ID's, creating potential for arbitrarily changing UID/GID and gaining unauthorized access to data and network...
mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
File Path Sanitizer Permits Arbitrary User-Home Absolute Paths Summary mcp-sanitizer v1.3.3 explicitly whitelists /home/ and /Users/ as allowed absolute path prefixes in its file path validation logic src/utils/validation-utils.js:188-196. As a result, paths such as /home/alice/.ssh/idrsa and...
Malware in itsa-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in itsa-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efba97f94ff89238d70b9715f9f85dea58617cc13e827ae163fdec80d00cd30b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in camelotlabs-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
ROOT-APP-NPM-CVE-2026-114604 CVE-2026-114604 in @graphql-tools/utils - Patched by Root
Root has patched CVE-2026-114604 in the @graphql-tools/utils package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-104852 CVE-2026-104852 in @graphql-tools/utils - Patched by Root
Root has patched CVE-2026-104852 in the @graphql-tools/utils package for Root:npm. Multiple fixed versions available...