6993 matches found
MAL-2024-11846 Malicious code in stripe-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37cffd89914421e6ec876ab385cbb856e29b04d39b9a37f04de91f0f8a0bfa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11841 Malicious code in graphql.vscode-graphql-syntax (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d28da17294cea5d68bf358dd4576cf98bbc3d373b4add618e2c56ab5c18358 The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 npm as malicious. It is considered malicious because:...
MAL-2024-11838 Malicious code in openai-realtime-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11787 Malicious code in anumanu2324 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4968a40c8a0664918114879119462d46034747809e1dfae1d03748017f9708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Troubleshooting Guidance for Apps Optimized with Citrix Unified Communications SDK
Document what data needs to be collected for Citrix support and Citrix engineers to troubleshoot issues with a vendor application that is optimized with Citrix Unified Communications SDK...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
CVE-2024-50928
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...
CVE-2024-50928
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...
CVE-2024-50928
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller...
PT-2024-34458 · Silicon · Z-Wave Series 700 +1
Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue is related to insecure permissions in the Silicon Labs Z-Wave Series 700 and 800, which allow attackers to modify the wakeup interval of end devices in the...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
MAL-2024-11769 Malicious code in dhp-logging-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware def2cfdcf7555dce8bc6545670a20f1748d6588683a817bc7d922f42c8e9cd43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11239 Malicious code in bbb-logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 521983fba00c501c41ccbb9e7737eed8be5cff75f427bd2db33daacfdc645e02 The OpenSSF Package Analysis project identified 'bbb-logging' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...
MAL-2024-11228 Malicious code in qwilr-examples-create-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0bbec32dcccb555fb5667a8f1cb7f4973512ac8acbea5261a4ff7d14a952476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11224 Malicious code in file-dep-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 167e76bf6af632f8aff7b06b0a8b05d6a25772b2cb139605e13b5b9a84ecf53b The OpenSSF Package Analysis project identified 'file-dep-a' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in ripple-blobvault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bb338f9818afd2b62bcfae1974c0ab6000b8f99f0c2815b33790a14c6beef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
With Threats to Encryption Looming, Signal’s Meredith Whittaker Says ‘We’re Not Changing’
At WIRED’s The Big Interview event, the president of the Signal Foundation talked about secure communications as critical infrastructure and the need for a new funding paradigm for tech...
CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers
Today, CISA—in partnership with the National Security Agency NSA, the Federal Bureau of Investigation FBI, and international partners—released joint guidance, Enhanced Visibility and Hardening Guidance for Communications Infrastructure. Partners of this guidance include: Australian Signals...