Cobalt Stike Beacon Detected – 168[.]100[.]11[.]124:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
RansomHouse gang claims to have stolen 450GB of data from chip maker giant AMD
The RansomHouse gang claims to have breached the Chipmaker giant AMD and stole 450 GB of data from the company...
Mozilla Firefox code execution | CVE-2022-2200
NAME Mozilla Firefox code execution Platforms Affected:Mozilla Firefox 101 Mozilla Firefox ESR 91.10 Mozilla Thunderbird 101 Mozilla Thunderbird 91.10Risk Level:8.8Exploitability:UnprovenConsequences:Gain...
Node.js consideration-deploy-bot module execution |
NAME Node.js consideration-deploy-bot module execution Platforms Affected:Node.js consideration-deploy-botRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js consideration-deploy-bot module could allow a remote attacker to...
Node.js fk-react-lottie-player code execution |
NAME Node.js fk-react-lottie-player code execution Platforms Affected:Node.js fk-react-lottie-playerRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js fk-react-lottie-player could allow a remote attacker to execute...
Node.js en-conduit-schema module code execution |
NAME Node.js en-conduit-schema module code execution Platforms Affected:Node.js en-conduit-schemaRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js en-conduit-schema module could allow a remote attacker...
Node.js parse-url module server-side request forgery | CVE-2022-2216
NAME Node.js parse-url module server-side request forgery Platforms Affected:Node.js parse-url 6.0.2 Node.js parse-url 6.0.1 Node.js parse-url 5.0.8 Node.js parse-url 5.0.7...
Node.js en-conduit-plugin-in-app-purchasing module execution |
NAME Node.js en-conduit-plugin-in-app-purchasing module execution Platforms Affected:Node.js en-conduit-plugin-in-app-purchasingRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js en-conduit-plugin-in-app-purchasing module could allow a remote attacker to...
Node.js evernote-client module execution |
NAME Node.js evernote-client module execution Platforms Affected:Node.js evernote-clientRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js evernote-client module could allow a remote attacker to...
Mozilla Firefox code execution | CVE-2022-34485
NAME Mozilla Firefox code execution Platforms Affected:Mozilla Firefox 101Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Mozilla Firefox could allow a remote attacker to...
Node.js zilliqa module code execution |
NAME Node.js zilliqa module code execution Platforms Affected:Node.js zilliqaRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js zilliqa module could allow a remote attacker...
Node.js conduit-view module execution |
NAME Node.js conduit-view module execution Platforms Affected:Node.js conduit-viewRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js conduit-view module could allow a remote attacker to...
Vim code execution | CVE-2022-2208
NAME Vim code execution Platforms Affected:Vim Vim 8.2Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim could allow a remote attacker to...
Mozilla Firefox integer overflow | CVE-2022-34481
NAME Mozilla Firefox integer overflow Platforms Affected:Mozilla Firefox 101 Mozilla Firefox ESR 91.10 Mozilla Thunderbird 101 Mozilla Thunderbird 91.10Risk Level:8.8Exploitability:UnprovenConsequences:Gain...
Mozilla Firefox code execution | CVE-2022-34482
NAME Mozilla Firefox code execution Platforms Affected:Mozilla Firefox 101Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Mozilla Firefox could allow a remote attacker to...
Node.js jsrsasign module execution |
NAME Node.js jsrsasign module execution Platforms Affected:Node.js jsrsasignRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js jsrsasign module could allow a remote attacker to...
Hikvision Hybrid SAN/Cluster Storage products command execution | CVE-2022-28171
NAME Hikvision Hybrid SAN/Cluster Storage products command execution Platforms Affected:Hikvision DS-A71024/48/72R 2.3.8-6 Hikvision DS-A80624S 2.3.8-6 Hikvision DS-A81016S 2.3.8-6 Hikvision DS-A72024/72R...
Vim buffer overflow | CVE-2022-2207
NAME Vim buffer overflow Platforms Affected:Vim Vim 8.2Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim is vulnerable a heap-based buffer overflow,...
Vim code execution | CVE-2022-2206
NAME Vim code execution Platforms Affected:Vim Vim 8.2Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim could allow a remote attacker to...
Node.js en-conduit-sync module code execution |
NAME Node.js en-conduit-sync module code execution Platforms Affected:Node.js en-conduit-syncRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js en-conduit-sync module could allow a remote attacker...
Wire cross-site scripting | CVE-2022-29168
NAME Wire cross-site scripting Platforms Affected:Wire WireRisk Level:9.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION Wire is vulnerable to cross-site scripting, caused by improper validation...
ionicabizau/parse-url cross-site scripting | CVE-2022-2217
NAME ionicabizau/parse-url cross-site scripting Platforms Affected:Node.js parse-url 6.0.2Risk Level:9.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION ionicabizau/parse-url is vulnerable to cross-site scripting, caused by improper...
Mozilla Firefox code execution | CVE-2022-34483
NAME Mozilla Firefox code execution Platforms Affected:Mozilla Firefox 101Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Mozilla Firefox could allow a remote attacker to...
Node.js util-utf8-browser module code execution |
NAME Node.js util-utf8-browser module code execution Platforms Affected:Node.js util-utf8-browserRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js util-utf8-browser module could allow a remote attacker...
