Malicious code in @hnbi/searchfeuikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc2a084aa0cb1894201a316f58f41e4ec30f5b5cb2e4d0fbe2d514c544064de4 The OpenSSF Package Analysis project identified '@hnbi/searchfeuikit' @ 3.1.4 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8222 Malicious code in @csmsce/msx-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0fc7c362db232e6c3dff94d78d7360704684a2c76d019283f6f1d3e86b3e6e8 The OpenSSF Package Analysis project identified '@csmsce/msx-types' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in @ms-mwf/moray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f6aa5d1e70a75cd04a649afec90fd43acb9a5ebdbeda194fdb47cd288ecd670 The OpenSSF Package Analysis project identified '@ms-mwf/moray' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8221 Malicious code in @ms-mwf/moray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f6aa5d1e70a75cd04a649afec90fd43acb9a5ebdbeda194fdb47cd288ecd670 The OpenSSF Package Analysis project identified '@ms-mwf/moray' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8219 Malicious code in callhtmcall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03a873d8d4db0e3281e619370cee727f1dd276f0d0bb095bf180589e02d15a78 The OpenSSF Package Analysis project identified 'callhtmcall' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8214 Malicious code in circus-amd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97f06ccac9689a5713832cbc65421f112f77a06d2b871ed73d73d7008828e0b9 The OpenSSF Package Analysis project identified 'circus-amd' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Hardcoded credentials

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The communication with this server is done using...

CVE-2023-43632 Freely Allocate Buffer on The Stack With Data From Socket

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The communication with this server is done using...

CVE-2023-43632 Freely Allocate Buffer on The Stack With Data From Socket

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The communication with this server is done using...

Rockwell Automation Select Logix Communication Modules

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR,...

Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25232)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25233)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device. This plugin only works with Tenable.ot. Please visit...

Buffer overflow

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously...

CVE-2023-2262 Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously...

CVE-2023-2262

The CVE-2023-2262 entry affects Rockwell Automation 1756-EN* communication devices (e.g., EN2T/EN2TK/EN2TXT/EN2TP/EN2TR/EN3TR, etc.). The vulnerability is a stack-based buffer overflow in the 1756 EN2T/EN2T-like modules triggered by a malicious CIP request, enabling potential remote code executio...

MAL-2023-8184 Malicious code in test-package-ings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7e6330e4c9a50f2df87dcf36790eeb27d1642ecfd882b3a09774d594c03e764 The OpenSSF Package Analysis project identified 'test-package-ings' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8160 Malicious code in bbc-iplayer-sounds-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d586de5a3bb31f4049fd207aa2c3ffc23d175a74c56bc0a75c52fd116f5291a The OpenSSF Package Analysis project identified 'bbc-iplayer-sounds-chatbot' @ 5.2.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-8125 Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

Wallarm Webinar: NIST CSF 2.0, API Security, and CISO Imperatives

Last week, our good friend Raj Umadas, Director of Security at ActBlue, teamed up with our very own Tim Erlin, Head of Product, to talk about the newly proposed NIST Cybersecurity Framework CSF. It was a fantastic discussion covering the intent behind this update, the major changes from v1.1 to...

Malicious code in walletconnect-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fedf1a7e034f6d4d96967609e8df064c5c028c14788047985c72051e2e6ab55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...