Uncover the Hidden Story of Ransomware Victims – They’re Not Who You Think

Uncover the Hidden Story of Ransomware Victims – They’re Not Who You Think By Trellix Advanced Research Center · July 31, 2023 Ransomware attacks against large corporations often dominate headlines. High-profile attacks against organizations like Kaseya, Colonial Pipeline, and MOVEit might make y...

MAL-2023-1042 Malicious code in yatai-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2023-62627)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

wrap after unfollow is enabled

Lines of code Vulnerability details Impact wrap after unfollownft is enabled , cause many problems Proof of Concept by design, wrap after unfollowed is not allowed,but it seems that it's possible due to lack of limitation. poc below: add below script in FollowNFTTest.t.sol //forge test --match-te...

MAL-2023-1082 Malicious code in @ikea-aoa/component-price-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7f7e0211ea2009802ec566e645d03e557dda0a2f62f2546df574ab757ab095d2 The OpenSSF Package Analysis project identified '@ikea-aoa/component-price-module' @ 99.0.1 npm as malicious. It is considered malicious because...

Artemis - APK Infrastructure Investigator

Overview A tools for Find APK Infrastructure . HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized our activities around the...

Malicious code in aws-sdk-js-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e64c49f08b91cb456113ae44bbd8efc8280a1c79aa45ca1bd0f019c4af6ad873 The OpenSSF Package Analysis project identified 'aws-sdk-js-v3' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1151 Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1188 Malicious code in gp-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af07f18bec84cba6878dd345ea1281728e0257d285118a40d835d7c9a2985a6 The OpenSSF Package Analysis project identified 'gp-actions' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

New Malvertising Campaign Distributing Trojanized IT Tools via Google and Bing Search Ads

A new malvertising campaign has been observed leveraging ads on Google Search and Bing to target users seeking IT tools like AnyDesk, Cisco AnyConnect VPN, and WinSCP, and trick them into downloading trojanized installers with an aim to breach enterprise networks and likely carry out future...

Malicious code in tecno-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 031d3e0a1576d7fedc52920ce24b349bbcefa4fc7c381855f1bcbdc0b82a4dd6 The OpenSSF Package Analysis project identified 'tecno-new' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1314 Malicious code in tecno-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 031d3e0a1576d7fedc52920ce24b349bbcefa4fc7c381855f1bcbdc0b82a4dd6 The OpenSSF Package Analysis project identified 'tecno-new' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

PTC KEPServerEX

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: KEPServerEX Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in the affected device crashing. 3. TECHNICAL...

MAL-2023-1164 Malicious code in dox_assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1c48c355e0ca22767468dec0d14be75c769e6b77c12e7c1a7989c0c6a487287 The OpenSSF Package Analysis project identified 'doxassets' @ 999.99.1 npm as malicious. It is considered malicious because: - The package...

Backdoor in TETRA Police Radios

Seems that there is a deliberate backdoor in the twenty-year-old TErrestrial Trunked RAdio TETRA standard used by police forces around the world. The European Telecommunications Standards Institute ETSI, an organization that standardizes technologies across the industry, first created TETRA in...

MAL-2023-1192 Malicious code in grizzly_sql_graph_visualization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98b80123b8320ae78359836efd59f32caab21e7efffea59f91bfb61b947bbab9 The OpenSSF Package Analysis project identified 'grizzlysqlgraphvisualization' @ 0.2.3 npm as malicious. It is considered malicious because: - T...

CVE-2023-37258

DataEase has a SQL injection vulnerability in versions prior to 1.18.9 that can bypass blacklist checks. Root cause: improper handling in SQL construction/validation allows bypassing input filtering. Affected: DataEase open-source data visualization/analysis tool (pre-1.18.9). Impact per sources:...

CVE-2023-37257

CVE-2023-37257 is a stored cross-site scripting vulnerability in DataEase prior to version 1.18.9, affecting the DataEase panel and dataset. The root cause is a stored XSS condition in the panel/dataset that could be triggered by user input or data rendering, as documented by multiple sources. Th...

CVE-2023-37257 The DataEase panel and dataset have a stored XSS vulnerability

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, the DataEase panel and dataset have a stored cross-site scripting vulnerability. The vulnerability has been fixed in v1.18.9. There are no known workarounds...