MAL-2024-7508 Malicious code in sap-addr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a86f1f5a5ebc610e32833675417c2fd45fd2d4e3cf39177e17a751d54c0599df The OpenSSF Package Analysis project identified 'sap-addr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-address1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dfc83763f15fe8a3b658ce9605d37f6ba83c1cadc35698df05753622e7671bd6 The OpenSSF Package Analysis project identified 'sap-address1' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7506 Malicious code in sap-addnew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12f8c238be86b6eda197ccf055ce731f7f59ebb9506f2333979fb21e18f5072a The OpenSSF Package Analysis project identified 'sap-addnew' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7499 Malicious code in sap-addauthitemform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b04239faf81734ad72467bb3ad94efbd1b815f6a57fe59ab82bc8a60571f7ae7 The OpenSSF Package Analysis project identified 'sap-addauthitemform' @ 0.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-7504 Malicious code in sap-additional (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f97452fca57b34db6b3e98a66ff621e04a75a6aa7d435dab0304d5f74c2add5 The OpenSSF Package Analysis project identified 'sap-additional' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-activkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5bcf3290f8461ce6ff5c8a8ebc248fd690b03bcb7506c7387a878e6b59c0e34a The OpenSSF Package Analysis project identified 'sap-activkey' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-activate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5924dc60c4c96949c7f4deaaefa269b7331fd9c71a59cb34f477e7936c21e65a The OpenSSF Package Analysis project identified 'sap-activate' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7497 Malicious code in sap-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ae8fbb8ba4434e711c35209ac7bc8e0d398cb5387e9314b8ad259ea82da4a9f The OpenSSF Package Analysis project identified 'sap-adapter' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e0a5149544b867f2487852926e46eba534638de827b17055beda04b632dbe63 The OpenSSF Package Analysis project identified 'sap-activity' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Juniper Networks Junos OS Evolved Security Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from the presence of a vulnerability that improperly restricts the communication channel to the target endpoint, allowing ...

Malicious code in sap-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aa14a85de6a25c0c6ad3c4e767a216f5abbd057f79e6b296168df122fe6d7eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Takeaways From The Take Command Summit: Unlocking ROI in Security

Rapid7 CMO Cindy Stanton hosted a discussions with Cindy Stanton, Byron Anderson, Principal InfoSec Engineer, KinderCare Learning Companies and Gaël Frouin Director IT Security, AAA Northeast to talk strategies for measuring team performance and demonstrating ROI in cybersecurity at Rapid7’s rece...

MAL-2024-7748 Malicious code in aroly-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5559e3338ab9d433fec892063a5f0ec5ac1164490196c5a095bc2ffb723e6290 The OpenSSF Package Analysis project identified 'aroly-test' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...

ViperSoftX Malware Disguises as eBooks on Torrents to Spread Stealthy Attacks

The sophisticated malware known as ViperSoftX has been observed being distributed as eBooks over torrents. "A notable aspect of the current variant of ViperSoftX is that it uses the Common Language Runtime CLR to dynamically load and run PowerShell commands, thereby creating a PowerShell...

Fortinet FortiWeb ] Lack of client-side certificate validation when establishing secure connections (FG-IR-22-326)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-326 advisory. - An improper certificate validation vulnerability CWE-295 in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions...

Juniper Junos OS Vulnerability (JSA82997)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82997 advisory. - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated,...

CVE-2024-33509

An improper certificate validation vulnerability CWE-295 in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the...

CVE-2024-33509

An improper certificate validation vulnerability CWE-295 in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the...