Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7009-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

The vulnerability of the NFC component in the Linux operating system’s kernel, related to memory usage after deallocation, allows for a malfunction that can lead to service failure.

The vulnerability of the NFC component in the Linux operating system’s kernel relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

MAL-2024-8949 Malicious code in tq-assignment-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7f3696cd235e903c072e0f059768eac6d02449c0391742e708b6ce69250e1a15 The OpenSSF Package Analysis project identified 'tq-assignment-js' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in tq-assignment-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7f3696cd235e903c072e0f059768eac6d02449c0391742e708b6ce69250e1a15 The OpenSSF Package Analysis project identified 'tq-assignment-js' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7007-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

MAL-2024-8937 Malicious code in labelv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cda1c25c57bcf643d5f0b072d315ccff37c5423681fbd3f6f6970ab021f51a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PJSIP: Heap Buffer Overflow

Background PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Description Please review the CVE identifier referenced below for details. Impact Please review the CVE identifier...

MAL-2024-8933 Malicious code in minification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f79ed869c7c386d877f1fc9d9cd294ad5e2a35ec2c35b31f3acd8898b1de81d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8932 Malicious code in @the-c-company/common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e18cae6ce0c3de2fe7988c316471f5383433deaa0e8b9bf0376b69b634188218 The OpenSSF Package Analysis project identified '@the-c-company/common-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in linear-airbyte-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2f93219b987eadd13a3db8af0914e4ccc9ea3d3fbf6f571e156e5e5861d25c6 The OpenSSF Package Analysis project identified 'linear-airbyte-source' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

PT-2024-10293 · Google +1 · Google Messages +1

The vulnerable software is Samsung's Monkey's Audio APE decoder, used in Samsung smartphones running Android versions 12, 13, and 14. The vulnerability is a high-severity out-of-bounds write flaw that allows remote attackers to execute arbitrary code on the device without any user interaction. Th...

MAL-2024-8923 Malicious code in cap1-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5b8be093bde3967e8014195e003d06618727ecdc4b285008efd0ac95fd7c988 The OpenSSF Package Analysis project identified 'cap1-application' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in asciidrawing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 633d53a1b6bcde673f71f2788cc6c268f7eef20552eb7a0dc3f533f6a9a7ad12 During installation, a Discord webhook is used to exfiltrate basic data. The package seems to attempt impersonating the "asciidraw" package some files and...

CVE-2024-9001 TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to os command injection. The attack can be initiated remotely. The...

Wherever There's Ransomware, There's Service Account Compromise. Are You Protected?

Until just a couple of years ago, only a handful of IAM pros knew what service accounts are. In the last years, these silent Non-Human-Identities NHI accounts have become one of the most targeted and compromised attack surfaces. Assessments report that compromised service accounts play a key role...

First Israel’s Exploding Pagers Maimed and Killed. Now Comes the Paranoia

The explosion of thousands of rigged pagers and walkie-talkies will likely make Hezbollah operatives fear any means of electronic communication. It’s having the same effect on the Lebanese population...

Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the mutual blocking of execution streams. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Malicious code in 0g-da-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2638730cdc6149851ffde4258625886da39146fb96e355280a2460ec01653ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...