MAL-2023-1500 Malicious code in wpi-rules-valid-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f8f8319f361dae60da61058ccd4776881160f6a820fbad5fe51373e6084e45b The OpenSSF Package Analysis project identified 'wpi-rules-valid-events' @ 6.6.6 npm as malicious. It is considered malicious because: - The...

MAL-2023-1497 Malicious code in code-debug-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c78c334cc38295767013c4a8b7bd904fd09069e4b7f938183d8c247eefb27bec The OpenSSF Package Analysis project identified 'code-debug-codes' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1498 Malicious code in jscrambler-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2030b82f282ea6a8622a42dfe9e944d63773863556536a6b8413c1141237854b The OpenSSF Package Analysis project identified 'jscrambler-cookies' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1496 Malicious code in sankson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 534fbedb1364b081bc2bfe7b675099176b6e2df503ee9b8e428a9815c589b224 The OpenSSF Package Analysis project identified 'sankson' @ 1.1.2 npm as malicious. It is considered malicious because: - The package communicat...

Citrix License server unavailable on Studio with Error: XDDS:796F2703

The license server is marked as unavailable on Studio even though the license server is up and running The error received when trying to connect to the license server is as follows, An error occurred while retrieving the certificate for the license server at this address. Further error details ar...

MAL-2023-1490 Malicious code in bugsnotfound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3980d08da6629463ad50e50b6a94591add7f48be24c1256a14e6d3e56fe69f55 The OpenSSF Package Analysis project identified 'bugsnotfound' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in postman-zendesk-support-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3501f72f7b7c1700a90f7ad5e3a55cd2462c210637c68dc75f9d336e9bf0063 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1493 Malicious code in postman-zendesk-support-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3501f72f7b7c1700a90f7ad5e3a55cd2462c210637c68dc75f9d336e9bf0063 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-data-constructor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fc7101aab5c7172a2ab40e0e1ce62dbd251d5301f5efb5f4c30cab065bb5cd The package's preinstall hook auto-executes index.js on npm install. The script imports https and os, collects os.hostname, os.platform, os.arch,...

Malicious code in marvelmaniac-devvit-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d8f161a565dceb33bc07806d7e65aae706550b73220940a4ff28cf2a50d5f The OpenSSF Package Analysis project identified 'marvelmaniac-devvit-rce' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1488 Malicious code in gkuis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ac9ca66ec9791a203c70c5eec65462375ffd178e9a8c35e3c8d9d0e201d1963 The OpenSSF Package Analysis project identified 'gkuis' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

CVE-2023-20209

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code...

MAL-2023-1485 Malicious code in top-gun-maverick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0918c52d62dfaec7570512c94da40ff77b2fbf449a0805b0c4c12f1c4f4f20 The OpenSSF Package Analysis project identified 'top-gun-maverick' @ 2.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1483 Malicious code in spark-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b69ba236f6e65c975d31bbd86381ca28f0abc32e518869dbc220b8cfe2c526e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in irviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2856bec7b72be87c4b6cc3f537871ee579bda13ad09ff85f5391ea1c0fdfe660 The OpenSSF Package Analysis project identified 'irviewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Cisco Expressway Series和Cisco TelePresence Video Communication Server 命令注入漏洞

Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS are both products of Cisco, Inc.Cisco Expressway Series is software for accessing devices outside the firewall. The software provides simple, highly secure access for users outside the firewall, helping telecommuters wo...

PT-2023-4589 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS version 14.0 Description: A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS...

MAL-2023-1471 Malicious code in leostorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e88b15902b8c65f58b9996af3a305c1c4f93f2c859262aa2e48d4aabba1a7f The OpenSSF Package Analysis project identified 'leostorm' @ 2.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1469 Malicious code in flowtorch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c2c3f2d7423991d07fec2693f59f64eaa2f3a3d0122fbf6f05e19a6d2a40871 The OpenSSF Package Analysis project identified 'flowtorch' @ 9.2.2 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Analytic Accelerator Framework for Communication Service Providers & IBM Customer and Network Analytics

Summary Eclipse Jetty is used in the solution's microservices bis, auth, analytics, cna as the engine of the HTTP server, underpinning APIs and UI. Several CVEs were found in the version used. These vulnerabilities are addressed. Vulnerability Details CVEID:CVE-2021-28169 DESCRIPTION: Eclipse Jet...