CVE-2024-12254

creationtimestamp| type| source ---|---|--- 2024-12-06 18:08:03+00:00| seen| https://t.me/cvedetector/12242 2025-01-29 20:06:38+00:00| seen| https://bsky.app/profile/mitsuhiko.at/post/3lgvrgdrdsk24 2025-01-29 20:06:38+00:00| seen| https://bsky.app/profile/mitsuhiko.at/post/3lgvrgcpcws24 2025-04-0...

Detecting Pegasus Infections

This tool seems to do a pretty good job. The company's Mobile Threat Hunting feature uses a combination of malware signature-based detection, heuristics, and machine learning to look for anomalies in iOS and Android device activity or telltale signs of spyware infection. For paying iVerify...

Exploits and vulnerabilities in Q3 2024

Q3 2024 saw multiple vulnerabilities discovered in Windows and Linux subsystems that are not standard for cyberattacks. This is because operating system developers have been releasing new security mitigations for whole sets of vulnerabilities in commonly used subsystems. For example, a log...

MAL-2024-11219 Malicious code in asuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d2219a3e70e5af240f63d41ab082cad543b84acf2abd045011db292bc69654 The OpenSSF Package Analysis project identified 'asuuuuu' @ 3.1.3 npm as malicious. It is considered malicious because: - The package communicat...

GHSA-R6WX-627V-GH2F Directus has an HTML Injection in Comment

Summary The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection. Details The Comment feature implements a...

“aiocpa” Python Package Exposed as Cryptocurrency Infostealer

SUMMARY The machine learning-based threat-hunting system of leading threat intelligence and cybersecurity firm ReversingLabs RL recently detected malicious…...

MAL-2024-11202 Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11201 Malicious code in coldbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8841e2d0dbc754df7eb19a7b42426c538506e0fc7412d08422bbd8f2cf983d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11200 Malicious code in quintoandar-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d0f52e6a3bbd3fdbc84b19ad4b18ff69ea20aa7dbb1fd508917d33072259ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-36058

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.13.4 Directus versions prior to 11.2.0 Description: The Comment feature in Directus has a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the...

MAL-2024-11188 Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11185 Malicious code in com.bovinelabs.analyzers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dc2ba08a52d30a711e8297ca2702ffd73f503608a85ae5d88e47aa32c7c5c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37575

The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.defaultdialer.DefaultDialerActivity component...

PT-2024-27669 · Unknown · Com.Grice.Call

Name of the Vulnerable Software and Affected Versions: com.grice.call application version 4.5.2 Description: The issue allows any installed application, even those without permissions, to place phone calls without user interaction by sending a crafted intent via the...

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance ASA. The vulnerability, tracked as CVE-2014-2120 CVSS score: 4.3, concerns a case of insufficient input validation in ASA's WebVPN login page that...

CVE-2024-49420

Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitrary activity...

CVE-2024-49420

Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitrary activity...

CVE-2024-49420: Undefined Security Weakness

Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitrary activity...

Samsung Smart Touch Call security vulnerability

SAMSUNG Smart Touch Call is a smart call application from the South Korean company Samsung SAMSUNG. Lets the user know immediately that a call is spam, blocks the call, and then lets the user report the call. A security vulnerability exists in versions prior to SAMSUNG Smart Touch Call 1.0.0.8 th...

SAMSUNG Gaming Hub security vulnerabilities

SAMSUNG Gaming Hub is a gaming center application from Samsung South Korea. A security vulnerability exists in SAMSUNG Gaming Hub versions prior to 7.1.03.7 that stems from improper response handling and allows remote attackers to initiate arbitrary activity...