Malicious code in ApрrovalUtilitіes (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3114 Malicious code in testing-utils1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in parsing-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in jquery-validation-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @lbank/lbank-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hotwire/react-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2943 Malicious code in @hotwire/react-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1758 Malicious code in @abb-americas/angular-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @abb-americas/angular-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

CLSA-2024-1719246768 shadow-utils: Fix of CVE-2023-4641

CVE-2023-4641: fix buffer cleaning issue when password fails on second attempt...

CVE-2024-31890

IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 288171...

Security Bulletin: IBM i is vulnerable to a local privilege escalation due to a flaw in IBM TCP/IP Connectivity Utilities for i [CVE-2024-31890].

Summary IBM i is vulnerable to a local user with command line access gaining elevated privilege due to a flaw in IBM TCP/IP Connectivity Utilities for i as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as described in the...

CVE-2024-31890: Execution with Unnecessary Privileges

IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 288171...

UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying

The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain unfettered access to compromised environments. "Persistence mechanisms encompassed...

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-9.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

Malware in braintree-utilities

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

OPENSUSE-SU-2024:12027-1 maven-shared-utils-3.3.3-1.1 on GA media

These are all security issues fixed in the maven-shared-utils-3.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

pcs security update

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcs packages provide a command-line configuration system for the Pacemaker an...

Malicious code in braintree-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ba47f404b8012a3baa206a37fd59066ff35442cb95da8ba7bd1b44a6b9a7968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1615 Malicious code in braintree-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ba47f404b8012a3baa206a37fd59066ff35442cb95da8ba7bd1b44a6b9a7968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...