New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Internet-facing Linux systems and Internet of Things IoT devices are being targeted as part of a new campaign designed to illicitly mine cryptocurrency. "The threat actors behind the attack use a backdoor that deploys a wide array of tools and components such as rootkits and an IRC bot to steal...

MAL-2023-1123 Malicious code in bespin_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9b9b100a28794dac4e539e7cc5f0b10522ca0838eeb49f5c78e02b754df4e2 The OpenSSF Package Analysis project identified 'bespinserver' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bespin_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9b9b100a28794dac4e539e7cc5f0b10522ca0838eeb49f5c78e02b754df4e2 The OpenSSF Package Analysis project identified 'bespinserver' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1339 Malicious code in vymo-jsevaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 043529532706257e33267bd81302d8dbf55ac5d275567919f6d62991806ba6e2 The OpenSSF Package Analysis project identified 'vymo-jsevaluator' @ 50.20.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1355 Malicious code in barcodeqrgen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e27682d3c0d71a71640f7d7830be4cd2125402e0509403333eb45413256f63c The OpenSSF Package Analysis project identified 'barcodeqrgen' @ 1.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in barcodeqrgen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e27682d3c0d71a71640f7d7830be4cd2125402e0509403333eb45413256f63c The OpenSSF Package Analysis project identified 'barcodeqrgen' @ 1.0.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1346 Malicious code in workfront-typescript-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f6635deb487ad3ada4485d2a185c815895af90e8a87da476ce19f4c37ef0d1f The OpenSSF Package Analysis project identified 'workfront-typescript-definitions' @ 1.1.1 npm as malicious. It is considered malicious because:...

MAL-2023-1330 Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1331 Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1329 Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-25747

creationtimestamp| type| source ---|---|--- 2023-06-19 14:25:28+00:00| seen| https://t.me/cibsecurity/65336...

Malicious code in att-codekit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 004ba0a87bf93fad7e23fc134ea62c1fad90d2917fff3ad6ca64a87adf16f69d The OpenSSF Package Analysis project identified 'att-codekit' @ 5.1.0 rubygems as malicious. It is considered malicious because: - The package...

MAL-2023-1361 Malicious code in dependency1338 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4342f154d7ceb9727add670c55348d65e1b2c18232cbf166d82257971ad05712 The OpenSSF Package Analysis project identified 'dependency1338' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1276 Malicious code in qrscrappers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b4db14e6db692ed154ddb9d82597d24bab338cabf83121f852118001db06b92a The OpenSSF Package Analysis project identified 'qrscrappers' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in ptrsec_rce (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c5f0c378deb022411d3a83e2b929f8ef8f9ad8e8eedd366e0863b7eb25d8aea The OpenSSF Package Analysis project identified 'ptrsecrce' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

CVE-2023-21138

In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for...

CVE-2023-21139

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21139

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21105

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-21129

In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed fo...