City worker loses USB stick containing data on every resident after day of drinking

A person working in the city of Amagasaki, in Western Japan, has mislaid a USB stick which contained data on the citys 460,000 residents. The USB drive was in a bag that went missing during a reported day of drinking and dining at a restaurant last Tuesday. The person reported it to the police th...

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-29162)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd's runc version where runc exec --cap executed processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-31030)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the ExecSync API. This can cause containerd to consume all...

Malicious Package

Overview mephisto-worker-experience is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

BSA-2022-1516

Security Advisory ID : BSA-2022-1516 Component : NGNIX Revision : 1.0 A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

Malicious code in mephisto-worker-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d7f1afc283ce715a697df2f30f12afa2c169ba32d82ca01e3d08bc4995ed8e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4557 Malicious code in mephisto-worker-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d7f1afc283ce715a697df2f30f12afa2c169ba32d82ca01e3d08bc4995ed8e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @boosted-bounty/worker-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac65616ab3b9d1e93325395ea4c9ba6d80038c09981499071d41d8039cba4a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6034 Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-clojure-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f0ca1f9db86d35e1c7bcc2ed22659d1986de5c3852fac7f6931f9be868dc58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7181 Malicious code in wixstore-client-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eced25a4252e07dbdd89a6ef0bf234832933e07c4601b5a1a030291f3f52ec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wixstore-client-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eced25a4252e07dbdd89a6ef0bf234832933e07c4601b5a1a030291f3f52ec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e3f62afc5a0e156f1d494428d69ca44add0e96c5df1557efe3d3de41fe61ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2544 Malicious code in do-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e3f62afc5a0e156f1d494428d69ca44add0e96c5df1557efe3d3de41fe61ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2581f7c50b25c20ae5834198173ce194fa7238eeeb9f1a542ddbb4e9dc55c59a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4261 Malicious code in launchdarkly-cloudflare-worker-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de576cf63a8f34f8fc17ce760973d6f5164d2bd3ddac3fe040cd53568d5ca332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4667 Malicious code in module-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2581f7c50b25c20ae5834198173ce194fa7238eeeb9f1a542ddbb4e9dc55c59a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...