PT-2023-24700

Name of the Vulnerable Software and Affected Versions SettingsProvider module affected versions not specified Description The issue is related to an inappropriate authorization vulnerability in the SettingsProvider module. Successful exploitation of this issue may cause features to perform...

PT-2023-24702

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description A permission control vulnerability exists in the window management module. Successful exploitation of this issue may cause features to perform abnormally. Recommendations At the momen...

CVE-2023-25736: Undefined Security Weakness

An invalid downcast from nsHTMLDocument to nsIContent could have lead to undefined behavior. This vulnerability affects Firefox 110...

OESA-2023-1347 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

Threat Roundup for June 9 to June 16

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between June 9 and June 16. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

MAL-2023-1132 Malicious code in chain00x_tsrc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5926bd93f4ff900c16d517fa3e4dc243e5a29e79d3fb377b8304df57ab6d347e The OpenSSF Package Analysis project identified 'chain00xtsrc' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1131 Malicious code in chain00x_rce1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d528fd659506ce3a370f146632641af04a4a41e0c1b4d0e148e48a2b57e8b40 The OpenSSF Package Analysis project identified 'chain00xrce1' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1134 Malicious code in chain00xtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d395f073dbbc2c8412d5341657a944edf74e11f1234dc1a97587fc4c3e6028c5 The OpenSSF Package Analysis project identified 'chain00xtest3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in chain00xtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d395f073dbbc2c8412d5341657a944edf74e11f1234dc1a97587fc4c3e6028c5 The OpenSSF Package Analysis project identified 'chain00xtest3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1133 Malicious code in chain00xtest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80e4a9d4552592ce0f6795c5766700fad9ffb00693e9e153665354e7f4286917 The OpenSSF Package Analysis project identified 'chain00xtest2' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-296 Malicious code in dvknpm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699740896647f6c3926d3579cb62aaf2d4cb804f000f96f4ad3d049f5c176b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

spring-boot: Spring Boot Welcome Page DoS Vulnerability

A flaw was found in Spring Boot, occurring prominently in Spring MVC with a reverse proxy cache. This issue requires Spring MVC to have auto-configuration enabled and the application to use Spring Boot's welcome page support, either static or templated, resulting in the application being deployed...

RUSTSEC-2023-0046 Misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...

MAL-2023-1130 Malicious code in cdp-ops--ts-accesslog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1166 Malicious code in dragonsense-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b16039afbf251f78d8c6adf4bb07342e8c112167bef9e0749651dacbdaf12c26 The OpenSSF Package Analysis project identified 'dragonsense-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1179 Malicious code in fabric-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Role might be granted and revoked at the same block to manipulate the role supply and result in incorrect behavior of relative strategy

Lines of code Vulnerability details Impact There is a potential issue where a role can be granted, votes can be cast, and then the role can be revoked in the same block. This can lead to incorrect behavior of relative strategy in manipulating the vote supply. The problem arises because the role...

DEBIAN-CVE-2023-3161

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a buffer overflow vulnerability that stems from a flaw in the frame buffer console fbcon that fails to properly check fbconsetfont when provided...

CVE-2023-3161

A flaw was found in the Framebuffer Console fbcon in the Linux Kernel. When providing font-width and font-height greater than 32 to fbconsetfont, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service...