MAL-2023-8685 Malicious code in npi.rechtspraaknl.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb49ec0b9727917a8198fad5a79119c7e1077433dd354f9de3686469232aaae7 The OpenSSF Package Analysis project identified 'npi.rechtspraaknl.web' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

New Microsoft Incident Response team guide shares best practices for security teams and leaders

As enterprise networks grow in both size and complexity, securing them from motivated cyberthreat actors becomes more challenging. The incident response process can be a maze that security professionals must quickly learn to navigate—which is no easy task. Surprisingly, many organizations still...

New Microsoft Incident Response team guide shares best practices for security teams and leaders

As enterprise networks grow in both size and complexity, securing them from motivated cyberthreat actors becomes more challenging. The incident response process can be a maze that security professionals must quickly learn to navigate—which is no easy task. Surprisingly, many organizations still...

MAL-2023-8681 Malicious code in bynderweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c0e459e61d88421f9f8e8abec619108bcd6e0bb8b0e6f556a442ed551cb0fa1 The OpenSSF Package Analysis project identified 'bynderweb' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in bynderweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c0e459e61d88421f9f8e8abec619108bcd6e0bb8b0e6f556a442ed551cb0fa1 The OpenSSF Package Analysis project identified 'bynderweb' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

Uptime Kuma Security Vulnerability

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from Louis Lam Personal Developer. A security vulnerability exists in versions prior to Uptime Kuma 1.23.9 that stems from the application using WebSocket, but it does not validate that the communication source is valid, which would allow...

New Bluetooth Attack

New attack breaks forward secrecy in Bluetooth. Three news articles: BLUFFS is a series of exploits targeting Bluetooth, aiming to break Bluetooth sessions forward and future secrecy, compromising the confidentiality of past and future communications between devices. This is achieved by exploitin...

BlueBunny - BLE Based C2 For Hak5's Bash Bunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Overview Structure Installation & Start 1. Install required dependencies pip install pygatt "pygattGATTTOOL" Make sure BlueZ is...

Malicious code in @saas-mf/ccm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4491a282ac34d4b4d1727c2376452a4566fb2a48fc548c5a86ef03a62902d9d0 The OpenSSF Package Analysis project identified '@saas-mf/ccm' @ 25.0.9 npm as malicious. It is considered malicious because: - The package...

Man-in-the-Middle (MitM)

github.com/edgelesssys/marblerun is vulnerable to Man-in-the-Middle attack. The vulnerability is due to a lack of explicit verification of the coordinator's certificate. This allows an attacker to intercept the communication between the CLI and the Coordinator, providing false information or...

MAL-2023-8666 Malicious code in react-dom-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4cfe9e9636852d3f77e9d66db174963751bf0c61eb2364bbee74ddff0b84c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information disclosure

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

CVE-2023-5768

The CVE-2023-5768 issue concerns Hitachi Energy RTU500 series using HCI IEC 60870-5-104. The vulnerability arises from incomplete or incorrect APDU frame layout, which can block the link layer; an endless blocking condition can occur while reading incoming frames when APDU length information is w...

MAL-2023-8653 Malicious code in astar-ci-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6a993eb0841db0ddd08de25ab3fc6aacace2d394a40bf1cece2476b76549b1e The OpenSSF Package Analysis project identified 'astar-ci-scripts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-26024

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...

CVE-2023-26024

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...

Design/Logic Flaw

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...

CVE-2023-26024 IBM Planning Analytics on Cloud Pak for Data information disclosure

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...

CVE-2023-26024 IBM Planning Analytics on Cloud Pak for Data information disclosure

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898...