14364 matches found
The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient checking of exceptional states, allows a violator to trigger a service failure.
The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the SPL “dump” command...
The vulnerability of the Intel SoC Watch energy consumption analysis software lies in the overflow of the heap-based buffers, allowing attackers to exploit their privileges.
The vulnerability of the Intel SoC Watch energy consumption analysis software is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges...
New Threat Actor 'AeroBlade' Emerges in Espionage Attack on U.S. Aerospace
A previously undocumented threat actor has been linked to a cyber attack targeting an aerospace organization in the U.S. as part of what's suspected to be a cyber espionage mission. The BlackBerry Threat Research and Intelligence team is tracking the activity cluster as AeroBlade. Its origin is...
Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION : Exploitable with adjacent access/low attack complexity Vendor : Zebra Technologies Equipment : ZTC Industrial ZT410, ZTC Desktop GK420d Vulnerability : Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful...
MISP cross-site scripting vulnerability (CNVD-2023-9749884)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. Cross-site scripting vulnerability exists in versions prior to MISP 2.4.179. The...
Malicious code in bingoblitz-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca05a909d0e70b609e4b0b342b303f09e7585d6ff3c890081fb66e42f504db72 The OpenSSF Package Analysis project identified 'bingoblitz-frontend' @ 1.999.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-8653 Malicious code in astar-ci-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6a993eb0841db0ddd08de25ab3fc6aacace2d394a40bf1cece2476b76549b1e The OpenSSF Package Analysis project identified 'astar-ci-scripts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in astar-e2e-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c7d3b2f90649e2315bacb152ef9917066857fd46b3240dca8dfa09ae075df60 The OpenSSF Package Analysis project identified 'astar-e2e-tests' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8650 Malicious code in ui-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e93713e0954987e046a76dc0d8345dbc4f887ac8d87d55c593ce1f4ebb01bbdf The OpenSSF Package Analysis project identified 'ui-header' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...
Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws
Apple has released software updates for iOS, iPadOS, macOS, and Safari web browser to address two security flaws that it said have come under active exploitation in the wild on older versions of its software. The vulnerabilities, both of which reside in the WebKit web browser engine, are describe...
MAL-2023-8647 Malicious code in npm_package_dependencies_base_64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57186be5c8cb34ac2917add3d88f89585c606a2b3cf4628030694c46c5f5ba27 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbase64' @ 2.0.0 npm as malicious. It is considered malicious because: - T...
MAL-2023-8648 Malicious code in npm_package_devdependencies__types_jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f8a28159fb1b2ef33b43e4aa71b0c85879d6220009091751cfa1590a1900329 The OpenSSF Package Analysis project identified 'npmpackagedevdependenciestypesjest' @ 30.5.0 npm as malicious. It is considered malicious...
iocs
It is an offensive tool for threat intelligence. The repository...
MAL-2023-8639 Malicious code in yetibarbar_plug (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c26573e1e915f00ad980599539d1a9a04737c0264c7a7366cf0b7a88a92df08 The OpenSSF Package Analysis project identified 'yetibarbarplug' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Eclipse IDE XXE in eclipse.platform
Impact xml files like ".project" are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file for example for review a foreign repository or patch. Vulnerablility was found by static code analysis SonarLint...
Attackers are Working Around The Clock. Luckily, So Are We.
It takes an average of 204 days for organizations to discover a breach, and from there an average of 73 days to contain it. With the average cost of a breach at an all time high of $4.45 million IBM’s Cost of a Data Breach Report 2023, there’s an undeniable need for teams to enlist the right...
7 Uses for Generative AI to Enhance Security Operations
Welcome to a world where Generative AI revolutionizes the field of cybersecurity. Generative AI refers to the use of artificial intelligence AI techniques to generate or create new data, such as images, text, or sounds. It has gained significant attention in recent years due to its ability to...
The vulnerability relates to the AV1 parser for subtitle analysis, subparse, and the Gstreamer multimedia framework. This allows attackers to execute arbitrary code.
The vulnerability of the AV1 codec parser, subtitles analysis module, and subparse in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
