CVE-2023-42531

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background...

Attacks, Vulnerabilities and Actors 30 October to 5 November 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of six executed attacks, three instances of adversary activity, and one exploited...

PT-2023-28397 · Unknown · Smscontroller

Name of the Vulnerable Software and Affected Versions: SmsController versions prior to SMR Nov-2023 Release1 Description: The issue is related to improper access control in the SmsController, allowing local attackers to bypass restrictions on starting activities from the background...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 14.5.00.7, which stems from a use of implicit intent to handle sensitive...

PT-2023-14644 · Unknown · Simple History – User Activity Log

Name of the Vulnerable Software and Affected Versions: Simple History – user activity log, audit tool versions 3.3.1 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to security risks when handling CSV files...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. An authorization issue vulnerability previously existed in SAMSUNG Mobile devices SMR Nov-2023 Release 1 version, which stemmed from an improper acces...

Moderate: sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fixes: sysstat: checkoverflow function can work incorrectly, which could lead to an overflow CVE-2023-33204 For more details about the security...

MAL-2023-8439 Malicious code in xsollacommercesdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb25c8cd452e451f491886bd2e6aac13c959913d018fd3d8d297ffa08340ec66 The OpenSSF Package Analysis project identified 'xsollacommercesdk' @ 3.3.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in jotform-webhook-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79c05d67fd61e4cb82e93b3c98181d7cc58e89c7dab47e8aab381f60211ef6db The OpenSSF Package Analysis project identified 'jotform-webhook-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-8438 Malicious code in jotform-webhook-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79c05d67fd61e4cb82e93b3c98181d7cc58e89c7dab47e8aab381f60211ef6db The OpenSSF Package Analysis project identified 'jotform-webhook-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in ch-frontend-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

NetworkAssessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses on spotting abnormal activities in the network traffic and searching for suspicious keywords. DNS Tunneling Detection : Identifies potential covert...

MAL-2023-8435 Malicious code in tvaultuiv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LEGO Marketplace BrickLink Hacked? Website Down Amid Unusual Activity (Updated)

By Deeba Ahmed BrickLink confirms probing into unusual activity. This is a post from HackRead.com Read the original post: LEGO Marketplace BrickLink Hacked? Website Down Amid Unusual Activity Updated...

Malicious code in littest (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7dbb9d0364d3e2b9efec40fc7a2ecdca02406774e6a4359423e6357cf9647e4 The OpenSSF Package Analysis project identified 'littest' @ 0.3.1 crates.io as malicious. It is considered malicious because: - The package...

MAL-2023-8424 Malicious code in atmos-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f378bc147196f8b9dfc477b3bc1c6af261257fb3a6f7812b89517a3b1a93778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-7VFX-HFVM-RHR8 cordova-plugin-fingerprint-aio DoS vulnerability

Summary: Sending a specially crafted intent with an invalid/empty extras de.niklasmerz.cordova.biometric.BiometricActivity can cause the app to crash. sending the intent repeatedly can prevent the app using this plugin from working, resulting in a denial of service DoS condition. Impact A 3rd par...

Mysterious Kill Switch Disrupts Mozi IoT Botnet Operations

The unexpected drop in malicious activity connected with the Mozi botnet in August 2023 was due to a kill switch that was distributed to the bots. "First, the drop manifested in India on August 8," ESET said in an analysis published this week. "A week later, on August 16, the same thing happened ...

MAL-2023-8422 Malicious code in bistrosk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 275abca8527ba6a0a29bf30537bad45fb01533a199b59ca9543da88dda4f8334 The OpenSSF Package Analysis project identified 'bistrosk' @ 200.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8421 Malicious code in counterstake-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914d424cbe1169a646b4168d95951a3b22819ba21697ff185656c69bd75c1512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...