sysstat: arithmetic overflow in allocate_structures() on 32 bit systems

An arithmetic overflow issue was discovered in Sysstat on 32-bit systems. The allocatestructures function in sacommon.c insufficiently checks bounds before arithmetic multiplication, allowing an overflow in the size allocated for the buffer representing system activities. The vulnerability can be...

MAL-2023-1264 Malicious code in paycom-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c80a2de08068c1bfcccc84d1061f40232d518c725dc774ab6ed2f73e25753978 The OpenSSF Package Analysis project identified 'paycom-events' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @clearing/noway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364 The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1078 Malicious code in @clearing/noway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364 The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

ALSA-2023:2234 Moderate: sysstat security and bug fix update

The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fixes: sysstat: arithmetic overflow in allocatestructures on 32 bit systems CVE-2022-39377 For more details about the security issues, including the...

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

An advanced persistent threat APT actor known as Dragon Breath has been observed adding new layers of complexity to its attacks by adopting a novel DLL side-loading mechanism. "The attack is based on a classic side-loading attack, consisting of a clean application, a malicious loader, and an...

MAL-2023-771 Malicious code in serverless-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c89475cfcb2e297c9055323646693ea6dd4a4b4f744b2802c608fdb86f04be92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-9 Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1120 Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-21496

Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...

CVE-2023-21488

Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips...

Improper access control

Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips...

MAL-2023-1177 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

MAL-2023-1124 Malicious code in bitshares-ui-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 429c86abce3dc07c32dc57d2f69b0a211675f08c5f2043d0ea8d67210c004995 The OpenSSF Package Analysis project identified 'bitshares-ui-style-guide' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1270 Malicious code in postaggingcorenlp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b30a154de5e7685f533a68a9ed3e6b7e0e3e577fb28781fcb408f0ac480e95d The OpenSSF Package Analysis project identified 'postaggingcorenlp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1207 Malicious code in idcs-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f9e71c07d690c8293d57afe2530d560684f82b76c844f9904256c1d330fc5af The OpenSSF Package Analysis project identified 'idcs-dialog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1429 Malicious code in modified_bayes (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5711b3c10ba19ca7c68581b9cd246029ba621b35c0371e4a043d69050b9363 The OpenSSF Package Analysis project identified 'modifiedbayes' @ 10.1.0 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2023-1244 Malicious code in nemocloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8748ebc02701b48db41bf89b1bbbf98ab868f2859b40d36ec5c45d80870f626b The OpenSSF Package Analysis project identified 'nemocloud' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

PT-2023-18250 · Unknown · Activitymanagerservice

Name of the Vulnerable Software and Affected Versions: ActivityManagerService versions prior to SMR May-2023 Release 1 Description: The issue allows an attacker to utilize a debug function by setting the debug level, potentially exploiting the Active Debug Code vulnerability in...