MAL-2023-568 Malicious code in literal-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-literal-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364c533f74b84a92914fb0654862ca1daf2f125812bd1fba9f8a8f112c773248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-393 Malicious code in fca-dongdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a178ae400bbd58633f7d8005bd8c591a3adbba417117cba116f6f7a6d97d569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecorp-secret-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d0bf7826238a624701946507e61cf63dc75ea421397e13d125e2721546c812f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-300 Malicious code in ecorp-secret-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d0bf7826238a624701946507e61cf63dc75ea421397e13d125e2721546c812f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-544 Malicious code in juno-branding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7445e9499982b52ca2f99b800d45f9d94599662f468ea58eac6c4a2dc8910ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Blacklist3r - Accumulate Secret Keys / Secret Materials Related To Various Web Frameworks

The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage of these...

OESA-2023-1414 kubernetes security update

Container cluster management. Security Fixes: Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are...

OESA-2023-1415 kubernetes security update

Container cluster management. Security Fixes: Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are...

MAL-2023-314 Malicious code in eth-api-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ae0229b0b9b6f52ad99cbadf592c4cd4a35c6b90764717a8d37ce843df055398 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

PT-2023-5082 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the set dmvpn function of the Milesight UR32L router's firmware, due to the use of an unsafe sprintf pattern. This can be exploited by a...

Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone

Secrets are meant to be hidden or, at the very least, only known to a specific and limited set of individuals or systems. Otherwise, they aren't really secrets. In personal life, a secret revealed can damage relationships, lead to social stigma, or, at the very least, be embarrassing. In a...

MAL-2023-824 Malicious code in sword123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6873abc1d5ac185b0cd7f13b940e3144dd46f0fddd5608e317c041de653e8bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in velor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dd8323c45be30eda6a4167c8e3799e4d598711e2568b55238dfea09e727326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-164 Malicious code in catteleya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9c8f112541c7f415a060c136109b57be2b983aeab2087f5ac85e0b553baec75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon S3 Droppy 1.4.6 Shell Upload

============================================================================================================================ | Title : Amazon S3 Droppy v 1.4.6 File Upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 Français V.Pro | | Vendo...

MAL-2023-973 Malicious code in xml-fast-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f72595dbe55afb8789d70686d9dfc77d102733a2090e76b1063b8a75dedd697 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks

Nikita Kislitsin, formerly the head of network security for one of Russias top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsins prosecution could soon put the Kazakhstan government in a...