13244 matches found
Irish Watchdog Imposes Record €310 Million Fine on LinkedIn for GDPR Violations
The Irish data protection watchdog on Thursday fined LinkedIn €310 million $335 million for violating the privacy of its users by conducting behavioral analyses of personal data for targeted advertising. "The inquiry examined LinkedIn's processing of personal data for the purposes of behavioral...
MAL-2024-10231 Malicious code in wasabicons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...
Malicious code in @sixsense/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f021d4dc50ebf01ce5a1613889fcaddc92acd07499b0c461b306a6ad5407442 The OpenSSF Package Analysis project identified '@sixsense/core' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
CVE-2024-48547
Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...
MAL-2024-10228 Malicious code in lcnc-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5796a2495979500b8108d1045890ebee60f0d9238a025ee5379ff89260e37285 The OpenSSF Package Analysis project identified 'lcnc-app' @ 3.5.3 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Deep Sea Electronics DSE855
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION : low attack complexity/public exploits are available Vendor : Deep Sea Electronics Equipment : DSE855 Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
PT-2024-33139 · Unknown · Xiao He Smart
Name of the Vulnerable Software and Affected Versions: XIAO HE Smart version 4.3.1 Description: The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file. Recommendations: For XIAO HE Smart version 4.3.1...
CVE-2024-48542
Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...
Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis
While cyberattacks that employ web shells and VPN compromise are not particularly novel, they are still prevalent. The recent incidents that Trend Micro MXDR analyzed highlight the importance of behavioral analysis and anomaly detection in security measures...
PT-2024-33144 · Wear Sync · Wear Sync
Name of the Vulnerable Software and Affected Versions: Wear Sync version 1.2.0 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK file...
CVE-2024-48540
Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...
CVE-2024-48538
CVE-2024-48538 affects Neye3C v4.5.2.0, where incorrect access control during firmware update and download enables an attacker to access sensitive information by inspecting code/data inside the APK. Root cause is improper access control in the update/download workflow; impact is exposure of confi...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
Exploit for Cross-site Scripting in Netgate Pfsense
This post is a research article published by EQSTLabhttps://g...
MAL-2024-9460 Malicious code in sling-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9454 Malicious code in ohcm-polymerase (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9452 Malicious code in pwn2day-shell (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9450 Malicious code in @wf-wfmfe/pxp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9fe18a3d9fa1111ff6b8067d5506179c0ddfa8365404a2b5ee147b523086df3 The OpenSSF Package Analysis project identified '@wf-wfmfe/pxp' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...