Malicious code in lfs-au-website-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

KLA78026 ACE vulnerability in Microsoft Developer Tools

A remote code vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-49063 Related products Microsoft-Dynamics-365 CVE list CVE-2024-49063 high Solution Install necessary updates from the KB...

Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2024-2522 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actual...

Rapid7 Extends Cloud Security Capabilities with Updates to Exposure Command

The cloud has become the backbone of modern innovation, powering everything from AI to remote work. But as organizations embrace the cloud, they also face an ever-expanding and increasingly complex attack surface. With purpose-built harvesting technology providing real-time visibility into...

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning ML tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for code execution. The vulnerabilities, discovered by JFrog, are part of a broader collection of 22...

CVE-2024-11149

In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...

Qualys TotalAI: The Journey from LLM Scanner to Comprehensive AI Security Solution

Embarking on the AI/ML Journey The launch of Qualys TotalAI marks a significant milestone in our journey with AI/ML. It all began in March 2024 when we ventured into the rapidly evolving AI/ML landscape and the emerging LLM ecosystem. Recognizing the potential of these technologies to revolutioni...

CVE-2024-51544

Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V10 files...

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system GENESIS64 software package for monitoring alarm signals, along with the MC Works64 software packages for dispatch control and data collection, allows a intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the Telephony Agent component in the AlarmWorX Multimedia SCADA system of GENESIS64, as well as the software packages for monitoring and data collection of MC Works64, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attacke...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8 files...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8C files...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of operations going beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V9C files...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of operations going beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V10 files...

Fuji Electric Monitouch V-SFT V10 File Parsing Buffer Overflow Vulnerability

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. A buffer overflow vulnerability exis...

ROS-20241203-04

A vulnerability in the Kubernetes virtual machine cluster management software tool is related to incorrectly restriction of the path name to a restricted directory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code outside of the container...

Fuji Electric Monitouch V-SFT X1 File Parsing Out-of-Bounds Write Code Execution Vulnerability

Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI from Fuji Electric. It supports a variety of features including customizable home screen, PDF document viewer, video player, alarm messages, 10 pop-up windows, and more. An out-of-bounds write code executio...

Why Cybercriminals Are Not Necessarily Embracing AI

As published in HackerNoon and featured as a “Top 20 Best Read Article” for AI. Introduction The rapid advancement of AI has offered powerful tools for malware detection, but it has also introduced new avenues for adversarial attacks. As an example, recently OpenAI reported threat actors abusing...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...