Evasive Shikitega Linux malware drops Monero cryptominer

Researchers from the AT&T Alien Labs Resarch have discovered a new and stealthy Linux malware it's dubbed Shikitega. Once it's on a machine or device, Shitega executes a "multistage infection chain" involving small files, a couple of vulnerabilities, and the use of Mettle, a portable Metasploit...

Moderate: Red Hat Security Advisory: VolSync 0.5 security fixes and updates

VolSync v0.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. VolSync v0.5 VolSyn...

CVE-2022-36637

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the brandname parameter at /brand.php...

Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.1.0 security and bug fix update

OpenShift API for Data Protection OADP 1.1.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Centreon 跨站脚本漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for network, system and application resources. A security vulnerability exists in Centreon version 22.04.0, which stems from a persistent...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement & bugfix update

Updated packages that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4.11.0 on Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...

CVE-2022-34658

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Cross site scripting

Multiple Authenticated contributor+ Persistent Cross-Site Scripting XSS vulnerabilities in W3 Eden Download Manager plugin = 3.2.48 at WordPress...

Low: 389-ds-base

Issue Overview: A double free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash. CVE-2021-4091 Affected Packages: 389-ds-base Issue Correction: Run yu...

Malicious code in alexhostx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f7b0bdadd7c2cbda6f78c816e3a95364e9fa57e28228da281a2ffa393cc8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unzdrscore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229dcd54650e45be891dbd8d59aefac0260a0a1429c4bf83ec6e3e795daac813 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soudl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ea453fa1a362f039fa6cb751574f4799ff726494e5b03200de2772e3e37c750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e5dbada20ab017124d92bc4f5312cda15b0680c315b35351f6c00570d4673f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-run-lal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a01d99608ddf590892902356233f88556d85bedfaf6508f312e9b7d54a69c23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in irmraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79003d7e88777d58f2bf060d4f054d2527e6c4ff77d970645be62920969ee1ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in i-wls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4403e46e10206e7c0b1c77bf4a27f6c3be2d94aedb52ba77ab8801902df948a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvodash.idsempty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abdefc6bc2f3dba6be0c4e0c50aec8d0b9801843d13f5fd4cbfeea178ca591d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reachelmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6febb836164d28bdfc2cc1049e46c4af578c671a9490d420ddc480d1989755e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pnpwebackplugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6888c2825f2df715081944685cfd223319a91bd15be079cda0eef3b196631e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nurijfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfb2522f45a92dce996099a6087a975357067c0c126aef2f79bafc837a1fb3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...