Trucking on with DotDumper

Trucking on with DotDumper By Max Kersten · May 11, 2023 On the 11th of August 2022, the initial public version of DotDumper was released. A brief refresh: DotDumper is an open-source automatic unpacker for DotNet Framework targeting files. This blog marks a public update which supports unmanaged...

Malicious code in dc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1150 Malicious code in dc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Denial of Service in Apache Commons used by WebSphere Application Server affect IBM Operations Analytics - Log Analysis (CVE-2023-24998)

Summary There is a vulnerability in the Apache Commons FileUpload library used by IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request...

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API

...

MAL-2023-1410 Malicious code in spammingsynonym (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97a0609c600ca9bc940340f2595fb41607b5af5c3931f10350bea6aa3c9879ae The OpenSSF Package Analysis project identified 'spammingsynonym' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1409 Malicious code in smsobfuscate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa2efc28ecdebc90e41edd50503e199984f68d05cb13edab8b6e8d503d18e75c The OpenSSF Package Analysis project identified 'smsobfuscate' @ 1.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1369 Malicious code in iiris-new2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f584cfefbd98e630ed7a59b892d50d96387e5941f2a09a3543324b1c418396 The OpenSSF Package Analysis project identified 'iiris-new2' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1309 Malicious code in stripe-deep-dup-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29790a4dda8ea513434302f82a02b4ef9cb90fa0b9e63de804082d284c8cb989 The OpenSSF Package Analysis project identified 'stripe-deep-dup-tree' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1308 Malicious code in stripe-deep-deep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in stripe-deep-deep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Intel Trace Analyzer And Collector 缓冲区错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector versions prior to 2021.8.0 that stems from the presence of a stack-based buffer...

Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1292 Malicious code in seafoam-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in paycom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1264 Malicious code in paycom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2022-48234

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

PT-2025-26115 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A file pointer leak has been identified in the Linux kernel, specifically in the tools/power turbostat component. This issue occurs when a fscanf fails, leading to an early return that...