Malicious code in test-mlw2-cotts-pyres-sigma-quids (npm)

The package test-mlw2-cotts-pyres-sigma-quids was found to contain malicious code...

MAL-2025-34105 Malicious code in stub-cat-good-quick-sigma (npm)

The package stub-cat-good-quick-sigma was found to contain malicious code...

MAL-2025-35130 Malicious code in test-mlw2-cotts-pyres-sigma-quids (npm)

The package test-mlw2-cotts-pyres-sigma-quids was found to contain malicious code...

MAL-2025-33233 Malicious code in sigma-reject-mock-try-simulate (npm)

The package sigma-reject-mock-try-simulate was found to contain malicious code...

MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-32671 Malicious code in sanitize-easy-sigma-user-execute (npm)

The package sanitize-easy-sigma-user-execute was found to contain malicious code...

MAL-2025-27876 Malicious code in nu-deploy-sigma-mu-grid (npm)

The package nu-deploy-sigma-mu-grid was found to contain malicious code...

CVE-2021-35522

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...

CVE-2020-12040

Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...

Evaluating the Robustness of Adversarial Defenses in Malware Detection Systems

Machine learning is a key tool for Android malware detection, effectively identifying malicious patterns in apps. However, ML-based detectors are vulnerable to evasion attacks, where small, crafted changes bypass detection. Despite progress in adversarial defenses, the lack of comprehensive...

Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

MAL-2025-723 Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...

MAL-2024-8826 Malicious code in sigma-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sigma-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Matter 安全漏洞

Matter is a unified open source application layer connectivity standard open sourced by the Connectivity Standards Alliance. Designed to enable developers and device manufacturers to connect and build reliable, secure ecosystems and improve compatibility between connected home devices. A security...

Security Bulletin: IBM Security QRadar Manager for YARA and SIGMA Rules App for IBM QRadar SIEM is vulnerable to using a component with a known vulnerability (CVE-2024-35195)

Summary The product includes a vulnerable component e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerability. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local...

Malicious code in self-service-sigma-account (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2999 Malicious code in self-service-sigma-account (npm)

--- -= Per source details. Do not edit below this line.=-...

sigma-cap.com Cross Site Scripting vulnerability OBB-3901944

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...