Lucene search
+L

618 matches found

Wired Threat Level
Wired Threat Level
added 2024/04/02 8:00 a.m.21 views

The XZ Backdoor: Everything You Need to Know

Details are starting to emerge about a stunning supply chain attack that sent the open source software community reeling...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/04/02 1:56 a.m.419 views

Exploit for Embedded Malicious Code in Tukaani Xz

Description Malicious code was discovered in the upstream tarb...

10CVSS9.8AI score0.85974EPSS
SaveExploits41
OpenVAS
OpenVAS
added 2024/04/02 12:00 a.m.59 views

Tukaani Project XZ Utils Backdoor (Feb/Mar 2024)

The XZ Utils of the Tukaani Project have been backdoored by an unknown threat actor in February and March 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS9.8AI score0.85974EPSS
SaveExploits41References14
HackRead
HackRead
added 2024/04/01 11:17 p.m.42 views

Backdoor Discovered in XZ Utils: Patch Your Systems Now (CVE-2024-3094)

By Waqas Critical Backdoor Alert! Patch XZ Utils Now CVE-2024-3094 & Secure Your Linux System. Learn how a hidden backdoor… This is a post from HackRead.com Read the original post: Backdoor Discovered in XZ Utils: Patch Your Systems Now CVE-2024-3094...

7.5CVSS6.9AI score0.85974EPSS
SaveExploits41
Veracode
Veracode
added 2024/04/01 9:18 p.m.51 views

Injected Malicious Code

XZ is vulnerable to Injected Malicious Code. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which...

10CVSS7.1AI score0.85974EPSS
SaveExploits41References56Affected Software3
Rapid7 Blog
Rapid7 Blog
added 2024/04/01 5:13 p.m.84 views

Backdoored XZ Utils (CVE-2024-3094)

On Friday, March 29, after investigating anomalous behavior in his Debian sid environment, developer Andres Freund contacted an open-source security mailing list to share that he had discovered an upstream backdoor in widely used command line tool XZ Utils liblzma. The backdoor, added by an...

7.5CVSS9.8AI score0.85974EPSS
SaveExploits41
F5 Networks
F5 Networks
added 2024/04/01 4:14 p.m.76 views

K000139141: liblzma vulnerability CVE-2024-3094

Security Advisory Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used t...

10CVSS9.3AI score0.85974EPSS
SaveExploits41
Akamai Blog
Akamai Blog
added 2024/04/01 4:00 p.m.19 views

XZ Utils Backdoor — Everything You Need to Know, and What You Can Do

...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/04/01 3:15 p.m.353 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 CVE-2024-3094 checker - Golang Ps.: This versio...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 2:28 p.m.68 views

Exploit for Embedded Malicious Code in Tukaani Xz

xzbot Exploration of the xz backdoorhttps://www.openwall.c...

10CVSS7.2AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 12:41 p.m.286 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 I've moved my notes in Obsidian to a separate v...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 9:06 a.m.299 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Malicious code was discovered in the upstream ta...

10CVSS10AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 9:05 a.m.242 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-info - https://github.com/lockness-Ko/xz-vulner...

10CVSS10AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 2:25 a.m.301 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-detect XZ Utils Vulnerability Check and Downg...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/01 1:56 a.m.320 views

Exploit for Embedded Malicious Code in Tukaani Xz

Vulnerability Overview XZ is a data compression format that e...

10CVSS7.5AI score0.85974EPSS
SaveExploits41
Tenable Nessus
Tenable Nessus
added 2024/04/01 12:00 a.m.74 views

XZ Utils 5.6.0 / 5.6.1 Liblzma Backdoor Check

The version of XZ Utils installed on the remote host is potentially affected by a backdoor vulnerability. Note: This plugin is paranoid because not all instances of the affected versions of XZ Utils are known to be vulnerable to the backdoor. The method of installation of XZ Utils plays a role in...

10CVSS8.6AI score0.85974EPSS
SaveExploits41References4
Tenable Nessus
Tenable Nessus
added 2024/04/01 12:00 a.m.43 views

GLSA-202403-04 : XZ utils: Backdoor in release tarballs

The remote host is affected by the vulnerability described in GLSA-202403-04 XZ utils: Backdoor in release tarballs - Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt...

10CVSS8.8AI score0.85974EPSS
SaveExploits41References3
GithubExploit
GithubExploit
added 2024/03/31 10:46 a.m.193 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 XZ Backdoor Tools This repository contains to...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/03/31 10:45 a.m.70 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 CVE-2024-3094 is a critical security vulnerabili...

10CVSS7.2AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/03/30 9:56 p.m.369 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Detection and Remediation Script This script is...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
Rows per page
Query Builder