Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6311-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6311-1 advisory. William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in...

Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7925 Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7921 Malicious code in helio_tawa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3969dd0c6bdf467c3fcee0073a43ac0e9db8c1719d8d6b0bee1b2ec7cddcc1ff The OpenSSF Package Analysis project identified 'heliotawa' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants

The leak of the LockBit 3.0 ransomware builder last year has led to threat actors abusing the tool to spawn new variants. Russian cybersecurity company Kaspersky said it detected a ransomware intrusion that deployed a version of LockBit but with a markedly different ransom demand procedure. "The...

MAL-2023-7917 Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-7907 Malicious code in emails-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddc90c0866243db5fa4b1832affff6a24b819654f1cc4a03c1930ceda374059c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emails-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddc90c0866243db5fa4b1832affff6a24b819654f1cc4a03c1930ceda374059c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Navigating Legacy Infrastructure: A CISO's Actionable Strategy for Success

Every company has some level of tech debt. Unless you're a brand new start-up, you most likely have a patchwork of solutions that have been implemented throughout the years, often under various leadership teams with different priorities and goals. As those technologies age, they can leave your...

MAL-2023-1573 Malicious code in website-frontend-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04f43ddaad758a9041c06daacb15db027a4552836ee0f59caa0b4762c87acdc6 The OpenSSF Package Analysis project identified 'website-frontend-cms' @ 99.99.0 npm as malicious. It is considered malicious because: - The...

CVE-2023-4420

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security TLS in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can...

Design/Logic Flaw

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security TLS in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can...

CVE-2023-4420

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security TLS in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can...

CVE-2023-4420

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security TLS in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can...

Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1569 Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1563 Malicious code in sketch-71-symbol-resync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6f850b539539800e75073f80c17bd8308630e63ec70240f60f65b625c85ae0b The OpenSSF Package Analysis project identified 'sketch-71-symbol-resync' @ 99.99.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1564 Malicious code in sketch-ipsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 722f81803d7487f9d05f1e65dfb836a6fa8821fd711b81a62cfe16061a549a99 The OpenSSF Package Analysis project identified 'sketch-ipsum' @ 99.99.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1561 Malicious code in cncf-interactive-landscape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d2b9d2c5124b5a628ea48abf890a34baae186cb6a3844fc2617ad57b21be8d9 The OpenSSF Package Analysis project identified 'cncf-interactive-landscape' @ 1.0.6 npm as malicious. It is considered malicious because: - The...

[SECURITY] Fedora 38 Update: libqb-2.0.8-1.fc38

A "Quite Boring" library that provides high-performance, reusable features fo r client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...