Malicious code in loaashmcrge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e69668a5a955325b81b0cfe134efa939088e64e8cc5cb3c17d1ec9342118175d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gruntconric4opy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55a0055227167610b248f694852bd23e746fa40fed4f2a6ad589341ec87e2cb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dbabelpreetstage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ef354610533ea219a0b088b2e812b5791e6a112d98e67e0382f78de2dbc6e50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crosse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2abc10fe50429ed3ede3fe0efbb03a6a8ae7e2bad45a73b00a2b5f9a4d54af57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelplugintransformclassproprties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f2cf83083c3b8010be953e5ffac9e9710d6ab60cd0bb48e9913f53f1dd9fcf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baeltraverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5521deb024dc261aa5752ce50bb07c2abb01b57a9150edc884d71557be491041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelpreset4stag3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df8fe48868e1f0ed1405f13ab7388a1abd2105207728fa0421e87e13032ae279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelpl0uginteansformasynctogenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e514eabee6d9e4ac0aacd5677fc2e90d389a7329a0784ca49d04262b71327c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in breezeweather (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 104a071c45ada8f8553b3d991630e629b778ce57c698cad969715075ec32a1c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BlueSky ransomware incorporates Multithreading to expedite encryption

Threat Level Attack Report For a detailed advisory, download the pdf file here Summary BlueSky ransomware is actively targeting businesses and demanding a ransom. It appears that they have ties with the Conti ransomware group. The malware is now primarily targeting Windows hosts and uses...

U.S. Dept Of Defense: springboot actuator is leaking internals at ██████████

Proof of Concept If you go to https://█████████/actuator you'll get a complete overview of all the endpoints that are accessable Suggestion: Use a Firefox Browser if possible, its json representation is well formed and the links are clickable ██████████ Impact Information Disclosure...

New IoT RapperBot Malware Targeting Linux Servers via SSH Brute-Forcing Attack

A new IoT botnet malware dubbed RapperBot has been observed rapidly evolving its capabilities since it was first discovered in mid-June 2022. "This family borrows heavily from the original Mirai source code, but what separates it from other IoT malware families is its built-in capability to brute...

Malicious code in ai-image-tagging-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: meg-0.2.4-7.fc36

Fetch many paths for many hosts without killing the hosts...

CVE-2022-36898

A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

CVE-2022-36897

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

CVE-2022-36896

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

CVE-2022-36898

A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

Malicious code in dolphin-dbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd9702f3fa3f82c265a1cb8d73de3f9f7446372aac73b4ce46efeaa5802cd1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4020 · Jenkins · Jenkins Compuware Source Code Download For Endevor +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin versions 2.0.12 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware...