MAL-2024-10281 Malicious code in test-package2345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 376f2c62728c1d9f82712acd63e4377bd525a0faae2b00a7746dd322c8e5379d The OpenSSF Package Analysis project identified 'test-package2345' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-29708 · Unknown · Acr.Browser.Lightning +1

Name of the Vulnerable Software and Affected Versions: com.videodownload.browser.videodownloader aka AppTool-Browser-Video All Video Downloader version 20-30.05.24 Description: The issue allows an attacker to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity...

Video Downloader 安全漏洞

Video Downloader is a video downloading application. A security vulnerability exists in Video Downloader version 20-30.05.24. An attacker can exploit this vulnerability to execute arbitrary JavaScript code via the acr.browser.lightning.DefaultBrowserActivity component...

MAL-2024-10259 Malicious code in custom-ui-extension-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10257 Malicious code in dragonhack-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b1338a8aad6f97922b365716dc5b0b1ae6065a7bbe28daa4c74eefc0155c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50073

creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:07+00:00| seen| https://t.me/cvedetector/9231 2025-08-05 12:45:10+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvnqg5kw5i2y 2025-08-05 12:45:17+00:00| seen|...

MAL-2024-10231 Malicious code in wasabicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10229 Malicious code in @sixsense/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f021d4dc50ebf01ce5a1613889fcaddc92acd07499b0c461b306a6ad5407442 The OpenSSF Package Analysis project identified '@sixsense/core' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

CVE-2024-49702

creationtimestamp| type| source ---|---|--- 2024-10-24 17:10:07+00:00| seen| https://t.me/cvedetector/8800 2024-10-24 20:06:50+00:00| seen| https://t.me/HackerArsenal/624...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Using Volatility for advanced memory forensics

TL;DR Memory forensics enhances investigations by analysing volatile data in RAM unavailable in disk forensics. Key insights from memory include running processes , network connections , encryption keys , and user activity , vital for real-time investigations. Smaller memory images 4-32 GB offer...

CVE-2018-17532

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-28 2024-11-02 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-20481

A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...

MAL-2024-9460 Malicious code in sling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9454 Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nuance-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b788479065c5160a08f7fcf3a2144521ea22a444ff39554c3c51f7c0ecec1c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9443 Malicious code in sn-flow-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c83ae0b3aa74be7de2508ec17549e3bc00e40edd30c62322e91be77ea48e69 package.json declares a preinstall hook "preinstall": "node index.js" that runs index.js automatically on npm install. index.js requires childprocess...

Seven Cybersecurity Tips to Protect Your Retail Business This Holiday Season

It’s no secret that the holiday season is the busiest time for online retailers, with sales starting as early as October and stretching until late December. According to the NRF, census data suggests that 2023 holiday sales experienced a 3.8% growth, reaching a record $964.4 billion about $3,000...

MAL-2024-9442 Malicious code in @ng-cat/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9440 Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...