Malicious code in nuxtjs_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc2f94efdf2068b7e7ceb3c7f058d573962b9484300a6d559ff9d7a947f22008 The OpenSSF Package Analysis project identified 'nuxtjsaxios' @ 5.13.6 npm as malicious. It is considered malicious because: - The package...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code on the device while analyzing SKP files...

MAL-2024-9299 Malicious code in tomorrowland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0815a68270dcf10f382a198392cb5e265233bc6fd6f8bd3fdaff345b87ce8e11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9297 Malicious code in viajemos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eaa4f7f65afd8ce40ebdcb66c5d40f5a10adf26157fb493c4628b2c5940d843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9288 Malicious code in blank-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9284 Malicious code in timeline-airtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9283 Malicious code in mmpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e1d61143b91e405fc0bf1401f3def53b01efefc28bfed53a58995d4dd41153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @client-innovation/librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...

MAL-2024-9290 Malicious code in @client-innovation/librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...

What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?

Probably once a week, I see posts like this in the r/Ubiquiti subreddit. Ubiquiti makes network gear that includes an "IDS/IPS" feature. I own some older Ubiquiti gear so I am familiar with the product. When you enable this feature, you get alerts like this one, posted by a Redditor: This is...

Akamai’s Perspective on October’s Patch Tuesday 2024

...

OSV-2024-1200 UNKNOWN READ in eat_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515100 Crash type: UNKNOWN READ Crash state: eatline extractfield parsesdpsession...

Malicious code in @copilot-web-widgets/ai-writer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 370d6b958dcc6a556f2ee4be3946c6a1a995bb05d4217f408f2302dd397689a2 The OpenSSF Package Analysis project identified '@copilot-web-widgets/ai-writer' @ 1.13.1 npm as malicious. It is considered malicious because: ...

MAL-2024-9212 Malicious code in @copilot-web-widgets/common-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 npm as malicious. It is considered malicious...

SpyCloud Adds Identity Analytics to Cybercrime Investigation Solution for Insider Risk

Austin, TX, USA, 10th October 2024, CyberNewsWire...

MAL-2024-9211 Malicious code in manoj-app-css-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c88dab3b32782f38a2c1b962d842f1c4c52400df0c5622d73f4989ebc8381f6 The OpenSSF Package Analysis project identified 'manoj-app-css-alt' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Rockwell Automation Logix Controllers

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Compact GuardLogix, CompactLogix, ControlLogix, GuardLogix, 1756-EN4TR Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful...

Schneider Electric Zelio Soft 2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Zelio Soft 2 Vulnerabilities : Use After Free, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Wireshark 安全漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark version 4.4.0, which stems from a crash in...

OSV-2024-1191 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371931330 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...