Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity...

CVE-2024-21264: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

MAL-2024-9288 Malicious code in blank-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9287 Malicious code in eslint-plugin-rossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The packa...

Malicious code in mmpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e1d61143b91e405fc0bf1401f3def53b01efefc28bfed53a58995d4dd41153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9282 Malicious code in huggingface-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05d5f0f4f0cc4f4b8a99f6a6b4c1ca2e0aa13ab6cd2d0d7fd3e7a23a2d9593cb The OpenSSF Package Analysis project identified 'huggingface-vscode' @ 100.2.2 npm as malicious. It is considered malicious because: - The packa...

The FBI Made a Crypto Coin Just to Catch Fraudsters

Plus: New details emerge in the National Public Data breach, Discord gets blocked in Russia and Turkey over alleged illegal activity on the platform, and more...

MAL-2024-9279 Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

DEBIAN-CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

UBUNTU-CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

CVE-2024-48937

Znuny has a cross-site scripting vulnerability (CVE-2024-48937) affecting Znuny before LTS 6.5.1–6.5.10 and 7.0.1–7.0.16, where JavaScript executed from the short description of the SLA field in Activity Dialogues can be triggered. The underlying issue is an XSS in the SLA short description conte...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

CVE-2024-48937: Improper Neutralization of Input During Web Page Generation

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

Znuny security vulnerabilities

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions 6.5.1 through 6.5.10, 7.0.1 through 7.0.16, and 6.0, which stems from a cross-site scripting vulnerability in which JavaScript code in the short description of the SLA field in the Activity dialog box...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

PT-2024-33283 · Znuny +1 · Znuny +1

Name of the Vulnerable Software and Affected Versions: Znuny versions prior to 6.5.1 through 6.5.10 Znuny versions 7.0.1 through 7.0.16 Description: The issue allows for XSS, where JavaScript code in the short description of the SLA field in Activity Dialogues is executed. Recommendations: For...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

Splunk Enterprise Privilege Escalation Command Injection

The vulnerability of Splunk Enterprise’s External Lookups technology relates to the improper elimination of certain elements used in the operating system’s command set. This occurs due to the use of data models for detecting unauthorized searches called SearchActivity. Exploiting this vulnerabili...