4441 matches found
CVE-2023-20857
VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...
Oracle Linux 9 : python3.9 (ELSA-2023-0953)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0953 advisory. 3.9.14-1.2 - Security fix for CVE-2022-45061 Resolves: rhbz2144072 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Malicious code in tppullhttpping (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22bcd803fb892acd48b70105f9a144401c443d69ea5eedd300486f8e567c954d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Deceptive Discord Campaign Targets Government Entities with PureCrypter Malware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Government entities in the Asia-Pacific and North American regions have been targeted by a threat actor using the PureCrypter malware downloader. This particular malware has been used to distribute vario...
Malicious code in tpkillosintcontrol (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8d27d9123bce8ed3b22f5e9c4d6c0021df241f8d69aa06a480c1ac0ebc893b8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in tpcraftinfonvidia (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 83de5776b8721ea2c78aea07d2a5f323ac2d7678d9e3abd876bd208e6c842780 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in selfmaskcandyrandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1e4a55384098509eb5251c40418f9d3c3b6543d7a2e95c4e5ddf4d2b87626392 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in selfstrcc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 197b84aceaa50afba71c5bcc88e738d784206a9ebb4b5725968f46aef612b578 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in tpadtoolmc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx edf2ea99f6c629b3333b0c088950a171c70a4362edf93097c77644b193a0e426 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...
CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...
New Hacking Cluster 'Clasiopa' Targeting Materials Research Organizations in Asia
Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools. Symantec, by Broadcom Software, is tracking the cluster under the moniker Clasiopa. The origins of the hacking group and its affiliations are currently unknown, but ther...
Newly Identified Threat Actor Hydrochasma Targets Shipping Companies and Medical Laboratories in Asia
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Hydrochasma is a newly identified threat actor that has been targeting shipping companies and medical laboratories in Asia since October 2022. This groups primary focus appears to be on intelligence...
Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices
Apple has revised the security advisories it released last month to include three new vulnerabilities impacting iOS, iPadOS, and macOS. The first flaw is a race condition in the Crash Reporter component CVE-2023-23520 that could enable a malicious actor to read arbitrary files as root. The iPhone...
K04280042: BIG-IP ASM vulnerability CVE-2019-6650
Security Advisory Description F5 BIG-IP ASM may expose sensitive information and allow the system configuration to be modified when using non-default settings. CVE-2019-6650 Impact The vulnerability is only present on multi-bladed systems VIPRION with BIG-IP ASM provisioned, on the following...
K40582331: Apache HTTP server vulnerability CVE-2022-28615
Security Advisory Description Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in apstrcmpmatch when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or...
K14703097: BIG-IP AFM vulnerability CVE-2019-6672
Security Advisory Description When bad-actor detection is configured on a wildcard virtual server on platforms with hardware-based sPVA, the performance of the BIG-IP AFM system is degraded. CVE-2019-6672 Impact The affected BIG-IP AFM system's CPU usage increases and may cause the legitimate...
K79240502: BIG-IP ASM Bot Detection DNS cache does not expire security exposure
Security Advisory Description When BIG-IP ASM Bot Detection is configured, the BIG-IP ASM system performs a reverse DNS lookup to determine if bot traffic classified as legitimate is, in fact, from those services for example, Google. These DNS responses are cached indefinitely until the Traffic...
