Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6913 Malicious code in font-assets (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-live_compile (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-offline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6705 Malicious code in assets-live_compile (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3828 Malicious code in vis-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vis-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-3054 Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sq-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3041 Malicious code in sq-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gp-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2429 Malicious code in gp-assets (npm)

--- -= Per source details. Do not edit below this line.=-...

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Crypto exchange Kraken revealed that an unnamed security researcher exploited an "extremely critical" zero-day flaw in its platform to steal $3 million in digital assets and refused to return them. Details of the incident were shared by Kraken's Chief Security Officer, Nick Percoco, on X formerly...

Improper Access Control

silverstripe/framework is vulnerable to Improper Access Control. The vulnerability is due to a weakness in the .htaccess rules preventing requests to uploaded PHP scripts, which allows PHP scripts in the assets directory to be executed via a specially crafted URL...

CVE-2024-29168

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing...

PT-2024-22775 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.22.00.00 Description: The issue concerns a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this, leading to the execution of...

Imperva Protects Against Critical PHP Vulnerability CVE-2024-4577

In the ever-evolving landscape of cybersecurity, staying ahead of vulnerabilities is crucial for safeguarding sensitive information and maintaining the integrity of digital assets. Recently, a critical vulnerability– identified as CVE-2024-4577 with an initial CVSS score of 9.8 – was discovered i...

WhatsApp cryptocurrency scam goes for the cash prize

This weekend a scammer tried his luck by reaching out to me on WhatsApp. It’s not that I don’t appreciate it, but trust me, it’s bad for your business. I received one message from a number hailing from the Togolese Republic. WhatsApp message from an unknow sender “Jay, your financial account has...