12972 matches found
MAL-2024-8044 Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0c03451c46b9f1a6e1a2ad4df4b3919782e86a4879fa78b7967ae7ec3e694645 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
MAL-2024-8017 Malicious code in artifact-lab-3-package-392c6acd (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ada0f9ebcf3f190d513b34099887d36ad38579e9c5b5d2004a8f0bff5565e100 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
Malicious code in artifact-lab-3-package-9fde789f (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f494a5211d4ea10a131bb54919b6d5e1bf765cea0c3cc018c054e7e304f5856f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
MAL-2024-8927 Malicious code in artifact-lab-3-package-db7d716a (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ba3dfc0be54b4fdd3d2d352e658210ad3d22d1108a4d1406320394a55e498f10 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
MAL-2024-8914 Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 73c351156cf1e0c234b98d0e640c60c93c88c92d42109fe64cbb83dd68e82375 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
...
Malicious code in benasin_logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8976a88d4fd270667bd1f7789de62b7f119041d63970f7c0a04c1ad1437c213f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8010 Malicious code in internal-corp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d9c3e7fab15abf1f202460c879135f1efc55a89e056e8cbf04055a4c77af39 The OpenSSF Package Analysis project identified 'internal-corp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...
ABB Ability System 800xA Improper Input Validation (CVE-2024-3036)
Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by sending specifically crafted messages. This issue affects 800xA Base: from 6.0.0 through 6.1.1-2. This plugin only works with Tenable.ot. Please...
Malicious code in @adidas-data-mesh/consumer-journey (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc1beaa9fe8440ba69a69eea5a7a92bc1a37479f9bf0c3f0fed177d303befaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @adidas-data-mesh/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-34636
Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information...
CVE-2024-34636
Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information...
ROS-20240725-09
A vulnerability in the NVIDIA GPU Display Driver software driver for Linux is related to privilege management errors. Exploitation of the vulnerability could allow an attacker to disclose protected information and cause a denial of service A vulnerability in the NVIDIA GPU Display Driver for Linu...
ROS-20240725-08
A vulnerability in the NVIDIA GPU Display Driver software driver for Linux is related to writing outside of memory boundaries. Exploitation of the vulnerability could allow an attacker to elevate privileges, disclose sensitive information, or spoof data A vulnerability in the NVIDIA GPU Display...
ROS-20240725-11
A vulnerability in the NVIDIA GPU Display Driver software driver for Linux is related to privilege management errors. Exploitation of the vulnerability could allow an attacker to disclose protected information and cause a denial of service A vulnerability in the NVIDIA GPU Display Driver for Linu...
