MAL-2024-10229 Malicious code in @sixsense/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f021d4dc50ebf01ce5a1613889fcaddc92acd07499b0c461b306a6ad5407442 The OpenSSF Package Analysis project identified '@sixsense/core' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

CVE-2024-49702

creationtimestamp| type| source ---|---|--- 2024-10-24 17:10:07+00:00| seen| https://t.me/cvedetector/8800 2024-10-24 20:06:50+00:00| seen| https://t.me/HackerArsenal/624...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Using Volatility for advanced memory forensics

TL;DR Memory forensics enhances investigations by analysing volatile data in RAM unavailable in disk forensics. Key insights from memory include running processes , network connections , encryption keys , and user activity , vital for real-time investigations. Smaller memory images 4-32 GB offer...

CVE-2018-17532

creationtimestamp| type| source ---|---|--- 2024-10-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-24 2024-10-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-28 2024-11-02 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-49681: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.0.9...

CVE-2024-20481

A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...

MAL-2024-9460 Malicious code in sling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9454 Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nuance-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b788479065c5160a08f7fcf3a2144521ea22a444ff39554c3c51f7c0ecec1c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-34091

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A vulnerability in the Linux kernel has been resolved, specifically in the netdevsim module. The issue was found by a static analyzer and involves the need to add a trailing zero to terminate...

MAL-2024-9443 Malicious code in sn-flow-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c83ae0b3aa74be7de2508ec17549e3bc00e40edd30c62322e91be77ea48e69 package.json declares a preinstall hook "preinstall": "node index.js" that runs index.js automatically on npm install. index.js requires childprocess...

Seven Cybersecurity Tips to Protect Your Retail Business This Holiday Season

It’s no secret that the holiday season is the busiest time for online retailers, with sales starting as early as October and stretching until late December. According to the NRF, census data suggests that 2023 holiday sales experienced a 3.8% growth, reaching a record $964.4 billion about $3,000...

MAL-2024-9442 Malicious code in @ng-cat/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9440 Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9441 Malicious code in unity-xlsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c00dae819c9f67995c5364676a4b71e58196df002687ac1e333816c86e0bd53d The OpenSSF Package Analysis project identified 'unity-xlsx' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a server activity leak in afsputserver that causes module offloads to hang...

MAL-2024-9436 Malicious code in nf-gestures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd3132b2cb17bc426c78b10555ce9246e42cab57a2a164d063850deb200c0ac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9431 Malicious code in roblox-creator-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c24626261c9a2e163bb8ec1654a1b5afeb68caf4f82285bf05ebefcf94d414e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...