[SECURITY] Fedora 40 Update: haproxy-2.9.10-1.fc40

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Malicious code in node-integration-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d6de79c4bf861e69bfe8d180b460e32004ab2e37565da361ba8874d29c6a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in conductor-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware debe53d4542ba37ede81c11f2616cddddf8770ea090f4b3d16482b831a489937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unmasking the Hidden Threat: Inside a Sophisticated Excel-Based Attack Delivering Fileless Remcos RAT

Unmasking the Hidden Threat: Inside a Sophisticated Excel-Based Attack Delivering Fileless Remcos RAT By Trellix · September 11, 2024 This blog was also written by Trishaan Kalra Introduction In the rapidly evolving landscape of cybersecurity, attackers are continuously refining their methods to...

Malicious code in cryptograph-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344b01183d31f7bfbadedba12b2bfe4e733ea76938ea8976787f6c400b39f5a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in color-print12345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a80777a026505265f48975425e0d198263c4cce7bae5200201d7a10c7b329d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45407

Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, b...

PT-2024-31611 · Sunshine · Sunshine

Name of the Vulnerable Software and Affected Versions: Sunshine affected versions not specified Description: The issue occurs when clients experience a Man-in-the-Middle MITM attack during the pairing process. This may allow access to an unintended client rather than failing authentication due to...

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible. The vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10...

Tropic Trooper spies on government entities in the Middle East

Executive summary Tropic Trooper also known as KeyBoy and Pirate Panda is an APT group active since 2011. This group has traditionally targeted sectors such as government, healthcare, transportation and high-tech industries in Taiwan, the Philippines and Hong Kong. Our recent investigation has...

Malicious code in hwieuor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2cbc673e05c4390b6cd2ec1907ab9c70242a26d924f3c307cb19e894d99ec5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nwoeuot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404c842cda4850228eaab866c8ca078cca68d14b801275a10006a08d84eef350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8768 Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zuwoirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e5c0bb7c2073b9aad16bf6ef85ed41176cc6c85197a2797fa6bb29ff439d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lioejre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2210c252fdd314dcf9fb63873b09b4cb94666ac597611b36276f4b2f8d5fb1cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dieomri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e162cf8130d089346af0ec82fbf746d7902759c3bb1e08eedad077e0e3f6ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in georiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40d9c64935e25585e8125dd120e9a9a02cc1c5bb8849fc4a20c0fc8992331726 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in car_mechanic_simulator_2014_torent_tpb_install__xwd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4125e66178d5447a89863cbb772759ba1c2fd516d19dbc7994ad687424c9b8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ptc_creo_parametric_2_0_torrent_top__4fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9888fffd9dcddf494a18ee48a7b8170ca94fbe732abc2218a3124fd740ad003f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...