10771 matches found
Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play
Spyware masquerading as modified versions of Telegram have been spotted in the Google Play Store that's designed to harvest sensitive information from compromised Android devices. According to Kaspersky security researcher Igor Golovin, the apps come with nefarious features to capture and...
A security community success story of mitigating a misconfiguration
Learn about the process of preventing security issues by changing things outside of your environment by looking at how a misconfiguration was occurring when Github Actions were integrated with AWS IAM roles and the improvements made that have now made this misconfiguration much less likely...
NetExec
!Supported Python versionshttps://img.shields.io/badge/python...
Malicious code in chatbot-community (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8060 Malicious code in chatbot-community (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in chatbot-community
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
communitycommons.org Cross Site Scripting vulnerability OBB-3651864
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-41628
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...
CVE-2023-41628
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...
CVE-2023-41627
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...
Code injection
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...
ric-plt-lib-rmr security vulnerability
ric-plt-lib-rmr is an open source message router library from O-RAN Software Community. Applications can use it to send messages to other RMR-based applications. A security vulnerability exists in ric-plt-lib-rmr version v4.9.0, which originates from not verifying the source of a received routing...
Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition
GitLab has fixed vulnerabilities in GitLab Enterprise Edition EE and Community Edition CE. A malicious party could vulnerabilities to exploit attacks that can result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Circumvention of security measure Access to syst...
CVE-2023-41628: Undefined Security Weakness
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...
CVE-2023-41627: Undefined Security Weakness
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...
CVE-2023-41628
CVE-2023-41628 affects the O-RAN Software Community E2 G-Release. A vulnerability in the messaging procedure between E2Node and E2Term can allow an attacker to cause a Denial of Service (DoS). The available documents specify the issue and its impact but do not provide explicit exploit details, af...
China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users
Cybersecurity researchers have discovered malicious Android apps for Signal and Telegram distributed via the Google Play Store and Samsung Galaxy Store that are engineered to deliver the BadBazaar spyware on infected devices. Slovakian company ESET attributed the campaign to a China-linked actor...
Malware in ductai-chatbot-community
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ductai-chatbot-community (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c77e0ede4c194a2280a25afb09eab42f56783293849e1ceb66bb39b6f62477 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...