MAL-2022-1194 Malicious code in aws-data-api-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e36620b1bbf035669a206034da9186c8aa8a8926a9288ee9fd34545aa6fc9ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-305 Malicious code in @gs-ux-uitoolkit-react/theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de95451355b7b46a650d357226215bd7cde93d64ec11e898dd20ae64776dc351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-303 Malicious code in @gs-ux-uitoolkit-react/select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5388b33525014b337227cc83d0fad7ff063ce76b9b1d21bcf8bfeffe45222a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-302 Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-gulp-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf7d1b2ebe5e5b7f1f7f511b711e53f72c1b309f2eaf8d14656e1e2b45d8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osefo.ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ad03487c3d1c755e40f53ddc4acd39347311f36ae8ddde8eb1689415f16510 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-tread-crc-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432450703069dc92f37370ab884a44d4934decfae46baa2d56f140b65cef9d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-tread-dotcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a100c935018b033c9267d802beaa470fbad3c3fef2761d6244cf706a2c20f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6880 Malicious code in ux-tread-crc-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432450703069dc92f37370ab884a44d4934decfae46baa2d56f140b65cef9d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6881 Malicious code in ux-tread-dotcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a100c935018b033c9267d802beaa470fbad3c3fef2761d6244cf706a2c20f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Azure RTOS USBX 安全漏洞

Microsoft Azure RTOS USBX is a high-performance USB host, device, and mobile OTG embedded stack open-sourced by Microsoft in the United States and fully integrated with Azure RTOS ThreadX. A security vulnerability exists in Microsoft Azure RTOS USBX versions prior to 6.1.10. An attacker exploits...

PT-2022-19475

Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.1.10 Description The issue arises when an attacker provides a HUB descriptor with bNbPorts set to a value greater than UX MAX TT, which defaults to 8, causing a buffer overflow in the Azure RTOS USBX host...

PT-2022-19494

Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.1.11 Description The issue concerns a buffer overflow in the USBX DFU UPLOAD functionality, which can be exploited to overwrite memory contents, bypass security features, or execute arbitrary code. This occu...

HPESBUX04274 rev.1 - HP-UX RPC services library, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 ONC and NFS Software - Prior to B.11.31.23 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2007-5462 |...

Security Bulletin: IBM® Db2® could allow a local user elevated privileges due to allowing modification of columns of existing tasks (CVE-2021-38926)

Summary Db2 could allow a local user elevated privileges due to allowing modification of columns of existing tasks. Vulnerability Details CVEID: CVE-2021-38926 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a local user to gain privileges due to allowing...

Security Bulletin: Stack-based Buffer Overflow vulnerability in IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Space Management (CVE-2021-39048)

Summary IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Space Management are vulnerable to a stack-based buffer overflow caused by improper bounds checking. Vulnerability Details CVEID: CVE-2021-39048 DESCRIPTION: IBM Spectrum Protect Client is vulnerable to a stack based...

Security Bulletin: IBM® Db2® could allow a local user to read and write specific files due to weak file permissions (CVE-2020-4976)

Summary IBM® Db2® could allow a local user to read and write specific files due to weak file permissions Vulnerability Details CVEID: CVE-2020-4976 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and wri...

Malicious user can DOS lock by falsely reaching maxNumberOfKeys using shareKey

Handle kenzo Vulnerability details A malicious user can call shareKey repeatedly, transferring miniscule amounts of his key to different accounts, thereby minting new keys until maxNumberOfKeys is reached. Impact Malicious user can grief and make lock purchasing become disabled. Proof of Concept ...

Lead a Cross-Organization Test Automation Project Fearlessly!

Last year, Imperva initiated a cross-organizational software project focused on creating a new management console and I had the privilege to lead its test automation effort. In this blog, I will explain the challenges we faced as technical leaders in executing the project and reveal the solutions...