4383 matches found
Malicious code in acts-as_explorable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_crafter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_better_tree (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_commentable_with_replies (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_time_as_boolean (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_nameable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2205 Malicious code in down_load_ebook_reincarnated_as_a_sword_manga_vol_6_by_yuu_tanaka_tomowo_maruyama_5jl7z (npm)
--- -= Per source details. Do not edit below this line.=-...
Oyster Backdoor Spreading via Trojanized Popular Software Downloads
A malvertising campaign is leveraging trojanized installers for popular software such as Google Chrome and Microsoft Teams to drop a backdoor called Oyster aka Broomstick and CleanUpLoader. That's according to findings from Rapid7, which identified lookalike websites hosting the malicious payload...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release
Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...
Schneider Electric Automation Servers SpaceLogic AS-P/B Information Disclosure
The vulnerability of the microprogramming software used in Schneider Electric’s Automation Servers SpaceLogic AS-P and SpaceLogic AS-B lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to obtain SNMP credentials...
CVE-2024-36677: Exposure of Private Personal Information to an Unauthorized Actor
In the module "Login as customer PRO" loginascustomerpro 1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen...
CVE-2024-36677
The Login as customer PRO (loginascustomerpro) module by Weblir for PrestaShop is vulnerable in versions prior to 1.2.7 . A guest can access a direct link to connect to every customer account in the shop if the module is not installed or if an administrator-accessible secret is stolen. This vulne...
CVE-2024-36677
In the module "Login as customer PRO" loginascustomerpro 1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the module is not installed OR if a secret accessible to administrator is stolen...
Exploit for Special Element Injection in Google Android
CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...
Schneider Electric SpaceLogic AS-P/AS-B Log Message Disclosure Vulnerability
The Schneider Electric SpaceLogic AS-P is an automation server from Schneider Electric France. The Schneider Electric SpaceLogic AS-P/AS-B suffers from a log message disclosure vulnerability that can be exploited by an attacker to cause SNMP credentials to be exposed...
NiceRAT Malware Targets South Korean Users via Cracked Software
Threat actors have been observed deploying a malware called NiceRAT to co-opt infected devices into a botnet. The attacks, which target South Korean users, are designed to propagate the malware under the guise of cracked software, such as Microsoft Windows, or tools that purport to offer license...
RLSA-2024:3837 Important: 389-ds-base security update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ...
CVE-2023-52750
In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM's integrated assembler would incorrectly byte-swap NOP when compiling for big-endian, and the resulting series of bytes happened to match...
Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware
The nascent malware known as SSLoad is being delivered by means of a previously undocumented loader called PhantomLoader, according to findings from cybersecurity firm Intezer. "The loader is added to a legitimate DLL, usually EDR or AV products, by binary patching the file and employing...
Security Vulnerabilities fixed in Thunderbird 115.12 — Mozilla
Memory corruption in the networking stack could have led to a potentially exploitable crash. If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. By monitoring the time certain operations take, an attacker could have guessed which...