SUSE-SU-2023:3055-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002455 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCAFLOWERKEYENCOPTSGENEVE packets in flsetgeneveopt in net/sched/clsflower.c bsc1212509. -...

SUSE-SU-2023:3035-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024134 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCAFLOWERKEYENCOPTSGENEVE packets in flsetgeneveopt in net/sched/clsflower.c bsc1212509. -...

MAL-2023-1289 Malicious code in scoot-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6be6ba14862d23e6f280567f9f5a3405b29138d36e7ba2b347ec7a02a1f34d77 The OpenSSF Package Analysis project identified 'scoot-tracking' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-24971 IBM B2B Advanced Communication denial of service

IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2023-2500)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass...

PT-2023-26552 · Unknown · Twitch-Tui

Name of the Vulnerable Software and Affected Versions: twitch-tui versions prior to 2.4.1 Description: The issue arises from the software's configuration of the IRC connection, which disables TLS, resulting in unencrypted communication to Twitch IRC servers. This allows communication, including...

MAL-2023-1042 Malicious code in yatai-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unmasking Decoy Dog Malware Toolkit Hiding in DNS Traffic

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Decoy Dog, a sophisticated malware toolkit uses DNS for C2 communication, evading detection with its wildcard-type behavior and encryption methods. Its origin remains mysterious, and the malwares...

CVE-2023-32427

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic...

Security Bulletin: IBM B2B Advanced Communication is vulnerable to cross-site scripting (CVE-2023-22595)

Summary IBM B2B Advanced Communications has addressed a cross-site scripting vulnerability. Vulnerability Details CVEID:CVE-2023-22595 DESCRIPTION: IBM B2B Advanced Communication is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U...

Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

A deeper analysis of a recently discovered malware called Decoy Dog has revealed that it's a significant upgrade over the Pupy RAT, an open-source remote access trojan it's modeled on. "Decoy Dog has a full suite of powerful, previously unknown capabilities – including the ability to move victims...

MAL-2023-1192 Malicious code in grizzly_sql_graph_visualization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98b80123b8320ae78359836efd59f32caab21e7efffea59f91bfb61b947bbab9 The OpenSSF Package Analysis project identified 'grizzlysqlgraphvisualization' @ 0.2.3 npm as malicious. It is considered malicious because: - T...

Malicious code in grizzly_sql_graph_visualization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98b80123b8320ae78359836efd59f32caab21e7efffea59f91bfb61b947bbab9 The OpenSSF Package Analysis project identified 'grizzlysqlgraphvisualization' @ 0.2.3 npm as malicious. It is considered malicious because: - T...

Malicious code in hui-micro-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f3e6ea52ec1a1674db2757b09ef3de1301aec7ae4e0f6a6128b533179cb071 The OpenSSF Package Analysis project identified 'hui-micro-app' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1203 Malicious code in hui-micro-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f3e6ea52ec1a1674db2757b09ef3de1301aec7ae4e0f6a6128b533179cb071 The OpenSSF Package Analysis project identified 'hui-micro-app' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1262 Malicious code in pages-workerjs-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 084fc58ae4c4ebf6fd1a7460a0d7e00057016e82e724191cfd78903391907100 The OpenSSF Package Analysis project identified 'pages-workerjs-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...

TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System

A set of five security vulnerabilities have been disclosed in the Terrestrial Trunked Radio TETRA standard for radio communication used widely by government entities and critical infrastructure sectors, including what's believed to be an intentional backdoor that could have potentially exposed...

CVE-2023-21406

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

Design/Logic Flaw

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...