476 matches found
CVE-2024-10125
The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...
CVE-2024-10125 Lack of JWT issuer and signer validation
The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...
CVE-2024-10125
CVE-2024-10125 concerns the Amazon.ApplicationLoadBalancer.Identity.AspNetCore middleware used with ALB OpenID Connect in ASP.NET Core deployments. The root cause is that JWT handling performs signature validation but fails to validate the JWT issuer and signer identity, enabling a signed token f...
MAL-2024-9551 Malicious code in client-lambda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf50ae6ac4fef994c4e5f3095c453c17478c09407aa364dce4a46981ba9eefc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in client-lambda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf50ae6ac4fef994c4e5f3095c453c17478c09407aa364dce4a46981ba9eefc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
LoadZilla LoadLogic 安全漏洞
LoadZilla LoadLogic is an application from LoadZilla, Inc. A security vulnerability exists in LoadZilla LoadLogic v1.4.3. An attacker can exploit the vulnerability to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction functions...
Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files .env that contain credentials associated with cloud and social media applications. "Multiple security missteps were present in the course of this campaign,...
AI/LLM Model File Contains Executable Code (Keras HFS5 .h5)
Binary data aimodelkerashfs5containsexecutablecode.nbin...
MAL-2024-7844 Malicious code in lambda-sns-dynatrace-sdk (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6846e2cf86562a1515400ba129d4fef5beb818c3002079e8bdd09c9e86f00fc5 Any computer that has this package install...
This Week in Spring - July 9th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it's been! We've got a lot to get into, so let's dive right in. I quite liked this talk, Continuations: The magic behind virtual threads in Java by Balkrishna Rawool @ Spring I/O 2024 In last week's episode of...
Malicious code in Be.Vlaanderen.Basisregistеrs.Sqs.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4068 Malicious code in Be.Vlaanderen.Basisregistеrs.Sqs.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4078 Malicious code in Be.Vlaanderen.Basisrеgisters.Aws.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisrеgisters.Aws.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisrеgistеrs.Sqs.Lаmbdа (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4086 Malicious code in Be.Vlaanderen.Basisrеgistеrs.Sqs.Lаmbdа (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4228 Malicious code in Be.Vlaaոderen.Basisrеgistеrs.Aws.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaaոderen.Basisrеgistеrs.Aws.Lаmbda (NuGet)
--- -= Per source details. Do not edit below this line.=-...