CVE-2022-48234

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

PT-2025-26115 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A file pointer leak has been identified in the Linux kernel, specifically in the tools/power turbostat component. This issue occurs when a fscanf fails, leading to an early return that...

How to Set Up a Threat Hunting and Threat Intelligence Program

Threat hunting is an essential component of your cybersecurity strategy. Whether you're getting started or in an advanced state, this article will help you ramp up your threat intelligence program. What is Threat Hunting? The cybersecurity industry is shifting from a reactive to a proactive...

MAL-2023-1233 Malicious code in mesbah-unclaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 263dd8e3a7c219627fe6ca196c18bb5262996c68f086fd118d74caec6e06aee1 The OpenSSF Package Analysis project identified 'mesbah-unclaim' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Exploit for Improper Ownership Management in Debian Debian_Linux

README gcc -Wall exp.c pkg-config fuse --cflags --libs...

Threat Roundup for April 28 to May 5

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between April 28 and May 5. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

MAL-2023-1268 Malicious code in pmcrypto-v7-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa2e150fa7626c456fcd88a95dd114616578c8bf69b9cf9c772d3858a051b6ba The OpenSSF Package Analysis project identified 'pmcrypto-v7-test' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1311 Malicious code in suncorp-styleguide-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b6a39ac171632a984b8ac8c3e53ab935e47753ac7e0df7161daa7bc23f8e08d The OpenSSF Package Analysis project identified 'suncorp-styleguide-react-components' @ 102.0.0 npm as malicious. It is considered malicious...

MAL-2023-9 Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1120 Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-453 Malicious code in font-forno (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71a5b24a13fdcf033190873535da22c0b00d1200f4ea936fbaa8a0883a1b6ce3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1177 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

MAL-2023-1124 Malicious code in bitshares-ui-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 429c86abce3dc07c32dc57d2f69b0a211675f08c5f2043d0ea8d67210c004995 The OpenSSF Package Analysis project identified 'bitshares-ui-style-guide' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1429 Malicious code in modified_bayes (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5711b3c10ba19ca7c68581b9cd246029ba621b35c0371e4a043d69050b9363 The OpenSSF Package Analysis project identified 'modifiedbayes' @ 10.1.0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in modified_bayes (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5711b3c10ba19ca7c68581b9cd246029ba621b35c0371e4a043d69050b9363 The OpenSSF Package Analysis project identified 'modifiedbayes' @ 10.1.0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in ban-notifier4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40f50b4925a587e36b4236377850d644915a64a9183b4f152ac4f99cefffd557 The OpenSSF Package Analysis project identified 'ban-notifier4' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1121 Malicious code in ban-notifier4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40f50b4925a587e36b4236377850d644915a64a9183b4f152ac4f99cefffd557 The OpenSSF Package Analysis project identified 'ban-notifier4' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...