Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a privilege bypass in registerReceiverWithFeature of ActivityManagerService.java. An attacker can exploit the vulnerability to elevate...

PT-2023-17909 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the registerReceiverWithFeature method of ActivityManagerService.java. This could allow isolated processes to register a broadcast receiver, potentially...

MAL-2023-1184 Malicious code in fusion-ng-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a24d384788c5f4810ac97c4f6ab429d9ef27b7dde67f62839ca68e7924695349 The OpenSSF Package Analysis project identified 'fusion-ng-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

SDG PnPSCADA

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: SDG Technologies Equipment: PnPSCADA Vulnerabilities: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to interact with the database and retrieve...

MAL-2023-1208 Malicious code in ikea-jssdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7ee2c27d65f23dc603308d3cb624e657745f399a18181feac7ab7a3d176d931 The OpenSSF Package Analysis project identified 'ikea-jssdk' @ 1.2.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in verycoolzpac2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded The OpenSSF Package Analysis project identified 'verycoolzpac2' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1212 Malicious code in innotecsaludo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0835a79941b28db8905c92debfa5937bc9bb5707163402d7b82630d5f35fd14 The OpenSSF Package Analysis project identified 'innotecsaludo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CISA and FBI Release Joint Advisory in Response to Active Exploitation of PaperCut Vulnerability

CISA and FBI have released a joint Cybersecurity Advisory CSA, Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG. This joint advisory provides details related to an exploitation of PaperCut MF/NG vulnerability CVE-2023-27350. FBI observed malicious actors exploit CVE-2023-27350...

MAL-2023-1190 Malicious code in gql2ts-from-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a1acee750c796d45e602f027ea638a05590a78bb142aca903bfb2bb169466a6 The OpenSSF Package Analysis project identified 'gql2ts-from-schema' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...

It is possible to steal the unallocated part of every delegation period budget

Lines of code Vulnerability details Attacker can monitor the standard proposals distribution and routinely steal each low activity period remainder by submitting a transfer to self proposal and voting a dust amount for it. Since the criteria for the final slate update is that any increase in tota...

MAL-2023-1150 Malicious code in dc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in httprequesting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb5f0b4d8a20b23a261bca2323ce8fbbbea6f868f64ab6aa260be08dd59ee6e7 The OpenSSF Package Analysis project identified 'httprequesting' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1409 Malicious code in smsobfuscate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa2efc28ecdebc90e41edd50503e199984f68d05cb13edab8b6e8d503d18e75c The OpenSSF Package Analysis project identified 'smsobfuscate' @ 1.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1412 Malicious code in spamsynonym (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bbc650ef44d412610406a674ac1fce3dcb717b01d175614f158016f47b53b1ce The OpenSSF Package Analysis project identified 'spamsynonym' @ 1.1.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in iiris-new2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f584cfefbd98e630ed7a59b892d50d96387e5941f2a09a3543324b1c418396 The OpenSSF Package Analysis project identified 'iiris-new2' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1309 Malicious code in stripe-deep-dup-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29790a4dda8ea513434302f82a02b4ef9cb90fa0b9e63de804082d284c8cb989 The OpenSSF Package Analysis project identified 'stripe-deep-dup-tree' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in mandrill-api-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16f2aff274da86497ad8fe6322b501a1269cd37d3ad40e227f11126aa2da5413 The OpenSSF Package Analysis project identified 'mandrill-api-ruby' @ 6.0.1 rubygems as malicious. It is considered malicious because: - The...

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors. The takedown is part of an ongoing international initiative dubbed Operation PowerOFF that's aimed at dismantling criminal DDoS-for-hire infrastructures worldwide. The...

Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...