Malicious code in ch-frontend-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

NetworkAssessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. DNS Tunneling Detection : Identifies potential covert...

MAL-2023-8435 Malicious code in tvaultuiv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LEGO Marketplace BrickLink Hacked? Website Down Amid Unusual Activity (Updated)

By Deeba Ahmed BrickLink confirms probing into unusual activity. This is a post from HackRead.com Read the original post: LEGO Marketplace BrickLink Hacked? Website Down Amid Unusual Activity Updated...

Malicious code in littest (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7dbb9d0364d3e2b9efec40fc7a2ecdca02406774e6a4359423e6357cf9647e4 The OpenSSF Package Analysis project identified 'littest' @ 0.3.1 crates.io as malicious. It is considered malicious because: - The package...

MAL-2023-8424 Malicious code in atmos-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f378bc147196f8b9dfc477b3bc1c6af261257fb3a6f7812b89517a3b1a93778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-7VFX-HFVM-RHR8 cordova-plugin-fingerprint-aio DoS vulnerability

Summary: Sending a specially crafted intent with an invalid/empty extras de.niklasmerz.cordova.biometric.BiometricActivity can cause the app to crash. sending the intent repeatedly can prevent the app using this plugin from working, resulting in a denial of service DoS condition. Impact A 3rd par...

Mysterious Kill Switch Disrupts Mozi IoT Botnet Operations

The unexpected drop in malicious activity connected with the Mozi botnet in August 2023 was due to a kill switch that was distributed to the bots. "First, the drop manifested in India on August 8," ESET said in an analysis published this week. "A week later, on August 16, the same thing happened ...

MAL-2023-8422 Malicious code in bistrosk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 275abca8527ba6a0a29bf30537bad45fb01533a199b59ca9543da88dda4f8334 The OpenSSF Package Analysis project identified 'bistrosk' @ 200.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8421 Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8419 Malicious code in ironfish-rust-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c72ce118b54d6f7c389cffe8b206419fdb96d698e61557ce25e5240a5ca6c38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demo-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7346c8d2670e05b376c36a799aafbe36cad56e319900ab63a766fea56e0985cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8417 Malicious code in transaction-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 588e3ae64f6791e490455f6c01512f655440e86bb808155dc3a0ece45f77b016 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8414 Malicious code in test262-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cee87d436e3a799f9c25994010662db61c2e7c3cdcefc4eab8e8d437f38e1755 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ASB-A-272024837

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of systemserver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Google Android Information Disclosure Vulnerability (CNVD-2024-01376)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by a lack of permission checking in the Activity Manager. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2023-37966

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...

CVE-2023-37966

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...

CVE-2023-37966 WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...