MAL-2024-22 Malicious code in stupidrara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3893054db7f136842c9eb85d9d6c2693ee9afa0f397ef3a30c14736aae381261 The OpenSSF Package Analysis project identified 'stupidrara' @ 0.0.0-jqNHd5ZlNt7p7qpN npm as malicious. It is considered malicious because: - Th...

Design/Logic Flaw

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...

Malicious code in chancets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf9c5ae637ce86f5dd9b811e29691dbc62866f58c76f517cd6d68f03e142a2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 39 : slurm (2023-9a74d212f8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9a74d212f8 advisory. - Update to 22.05.11 - Closes CVE-2023-49933 through CVE-2023-49938 Tenable has extracted the preceding description block directly from the Fedora...

Malicious code in new-pro-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-4 Malicious code in new-pro-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-3 Malicious code in hubl-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48b757cf4e86cc97abb28765fdf3f0a2205e99bbcf856ec3904b7e02038fea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8775 Malicious code in ngx-ndbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b85b4ba8a7146a1450ff0a1cc8b119bda90a838d67b93d8ad4f080551bfe002e The OpenSSF Package Analysis project identified 'ngx-ndbx' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

MQTT vs AMQP

The Initial Overview: Learning about MQTT & AMQP In the dynamic arenas of Internet of Things IoT" and cloud computing, communication protocols that are robust, reliable and capable of handling high traffic volumes have become essential. The two protocols that have recently gained significant grou...

Command injection

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201,...

MAL-2023-8760 Malicious code in chain00x_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

asphalte-communication.fr Improper Access Control vulnerability OBB-3824147

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-7163 D-Link D-View 8 Unauthenticated Probe-Core Server Communication

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

How to Build a Cybersecurity Culture in Your Company

Decoding the Essential Components of Cyber Safeguard Culture In today's era, marked by copious dependencies on digital technologies, strengthening defenses against digital security vulnerabilities has become more than just a choice, it's a critical necessity. Establishing a culture of cyber...

Weak Hashing Algorithm

bsock is vulnerable to a Weak Hashing Algorithm. The vulnerable is due to the libraries usage of weak hashing algorithm MD5, SHA1 within vendor\faye-websocket.js. This could allow an attacker to break the confidentiality of the websocket communication...

[SECURITY] Fedora 38 Update: tor-0.4.8.10-1.fc38

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

Malicious code in finalact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106 The OpenSSF Package Analysis project identified 'finalact' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in multicolored (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89f0e1660e4708cd5f0568f9c85ea2f35f883c21cb0f6a7d37e4d9d25a1dc8c8 The OpenSSF Package Analysis project identified 'multicolored' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8763 Malicious code in enchantv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f578b605e73b68aae8c1d8a9bd3f55b810839b2bccd720bccc7f887c2e0046c8 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

MAL-2023-8766 Malicious code in newpackagetest2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2facdf5925f09b064136d0c919a80e0e83d0a13b4b6f9d903162352c586dc9 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...