MAL-2022-6029 Malicious code in service-bus-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e1b8b529acee02d56796a94805118ff6b14c98a1ac6ef065cf6b472d87c602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79810924dd66fe9c776575518e9e717eed9422d73773cf4c0541041890df3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e8b972ae7ebe47ad31a4cfed964bf1308b4d910ddad0f713ef7e45af26dc43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5291 Malicious code in perf-service-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79810924dd66fe9c776575518e9e717eed9422d73773cf4c0541041890df3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6026 Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-110 Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability in the BizTalk Server BizTalk ESB Toolkit allows a attacker to perform a spoofing attack.

The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus Setup 1. Create an Azure Service Bus 2. Create a Shared access policy Connection string that can only Send and Listen 3. Edit the static connectionString variable in Beacon C projects to match the "Primar...

BizTalk ESB Toolkit 安全漏洞

Microsoft BizTalk ESB Toolkit is a powerful publish/subscribe mechanism for messaging applications that work by creating and populating subscriptions, which provides an efficient and scalable platform for Service Oriented Architecture SOA applications, from Microsoft Corporation USA. A security...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R17 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ONAP MSB Authorization Issues Vulnerability

ONAP MSB is a program from the ONAP project that can provide service registration, discovery and communication service functions for microservices. An authorization issue vulnerability exists in ONAP MSB Dublin and prior versions. An attacker can exploit this vulnerability to gain full privileges...

CVE-2019-12129

In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

Oracle WebLogic Server Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the jquery component of the Web Services of Oracle Weblogic Server. An unauthenticated, remote attacker can exploit this to gain unauthorized update, inser...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R12 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The vulnerability of the Web Container sub-component of the Oracle Service Bus component of the Oracle Fusion Middleware software platform allows a attacker to cause a service failure.

The vulnerability of the Web Container sub-component of the Oracle Service Bus component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...

CVE-2019-8991

The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and...

CVE-2019-8993

The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution f...

Cross site request forgery (csrf)

The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and...