13179 matches found
MAL-2023-8467 Malicious code in workspaces-install-already-exists (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bdda2d22ec10a2cb91f9d1d76dda780fbb0f7a5f70e35ecdb86daed289bd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8457 Malicious code in fa-icdc-form-api-bdt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24842401e160323f0909c7f6e561fbaa5cbdb6f3b5e3c0dfe2a4dd0fe1877e5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8450 Malicious code in airslate-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 187dae9cdc21ec49b7d2dd1609dcfe155123738e42a66793b16990e78bb18225 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mux-spaces-broadcast-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in stripe-terminal-react-native-dev-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148f318d6453b35d5563824a26fe185c3df7e96f1a4f12089adbbb556e867459 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gatsby-starter-gitlab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tvaultuiv2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in idme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59bf5be80aa56e65bc3e5000865abe09b7f0f0a8b23978c69c841e75a6c5503c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fadam-com-test-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1028a57be58715c37bd0e3271700d149d5b4c4a1a3ddb1c825878cb160570127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2017-2590
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of servic...
SUSE CVE-2017-7537
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates...
EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub
A new ongoing campaign dubbed EleKtra-Leak has set its eyes on exposed Amazon Web Service AWS identity and access management IAM credentials within public GitHub repositories to facilitate cryptojacking activities. "As a result of this, the threat actor associated with the campaign was able to...
Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes
Three unpatched high-severity security flaws have been disclosed in the NGINX Ingress controller for Kubernetes that could be weaponized by a threat actor to steal secret credentials from the cluster. The vulnerabilities are as follows - CVE-2022-4886 CVSS score: 8.8 - Ingress-nginx path...
CVE-2023-31416
Secret token configuration is never applied when using ECK =8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment...
CVE-2023-31416
Secret token configuration is never applied when using ECK =8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment...
CVE-2023-31416
The CVE-2023-31416 issue affects Elastic Cloud on Kubernetes (ECK) before 2.8 when used with APM Server 8.0 or later. The root cause is that the secret token configuration is not applied, which could allow anonymous requests to be accepted and lead to data ingestion into the APM deployment. Affec...
Design/Logic Flaw
An issue was discovered in Fleet Server = v8.10.0 and v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in th...
Elasticsearch Security Vulnerabilities
Elasticsearch is a search engine based on the Lucene library. A security vulnerability exists in Elasticsearch that stems from a secret token configuration that is not applied when combining some versions of ECK with APM Server...
PT-2023-23309 · Elastic · Apm Server +1
Name of the Vulnerable Software and Affected Versions: ECK versions prior to 2.8 APM Server versions 8.0 and later Description: The secret token configuration is not applied when using ECK with a version less than 2.8 alongside an APM Server version 8.0 or greater. This could lead to anonymous...
