Exploit for OS Command Injection in Cacti

Command injection vulnerability in Cacti CVE-2023-39362 - Po...

Migo Targets Redis Servers for Cryptojacking Attacks

Summary: A new campaign has been uncovered that mines cryptocurrencies on Redis servers running Linux hosts by means of a malicious programme known as "Migo." Migo is distributed as a Golang ELF binary that can persist on Linux hosts and is obfuscated at compile time. The malware uses a variety o...

btrbk: Remote Code Execution

Background btrbk is a backup tool for btrfs subvolumes, taking advantage of btrfs specific capabilities to create atomic snapshots and transfer them incrementally to your backup locations. Description A vulnerability has been discovered in btrbk. Please review the CVE identifier referenced below...

AZL-43501 CVE-2024-25629 affecting package python-pycares 3.1.1-3

c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.27.0, the /etc/hosts file. If any of these configuration files has an embedded...

New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux hosts. "This particular campaign involves the use of a number of novel system weakening techniques against the data store itself," Cado securi...

keycloak: redirect_uri validation bypass

A flaw was found in the redirecturi validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users...

keycloak: redirect_uri validation bypass

A flaw was found in the redirecturi validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users...

keycloak: redirect_uri validation bypass

A flaw was found in the redirecturi validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users...

Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign

Exposed Docker API endpoints over the internet are under assault from a sophisticated cryptojacking campaign called Commando Cat. "The campaign deploys a benign container generated using the Commando project," Cado security researchers Nate Bill and Matt Muir said in a new report published today...

Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b85f35b54205e38fa9e30703d677130b295a39c7ec6669f95d5c9979a9544c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d13c76d862c6b9979ddd74fa38381d47c6ffa431dfc9c692a0e9a123be15c456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6973f9f9e2a775db6577a008291d3ed732fcbd9a6a9ed749532a3722341aba12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878aeb82a49d804368d247c215e6c7558f6dd72355c907d30d144233ef77b4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24411c222e89a7a71a4240995458efbaea703b06f8dac73b2ef3dfb7f1e89bad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64bdb0d415445fd3b061b0c4ce0829deeca6165c0ec2dfe1ed6a899e29386fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7495afd91e3ecba3ef1eede78227095124832a71cdc60e582ac4c233e4aa63fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6c4e75af1d98e0e8aacef61a2d8a79406e420b1bea302e99bfa09934779508 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4231fe274ae45d9af5917dfbc9074473a6403e2d7644929d7be48e5ac180f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86163aecf0ef7f4d9e376d7d04d9874fe1b30306d89b5a85b05c75740fb24a7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...