kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmapipuadt When tbIPSETATTRIPTO is not present but tbIPSETATTRCIDR exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but...

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

Threat actors are continuing to upload malicious packages to the npm registry so as to tamper with already-installed local versions of legitimate libraries and execute malicious code in what's seen as a sneakier attempt to stage a software supply chain attack. The newly discovered package, named...

SUSE CVE-2024-53141

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmapipuadt When tbIPSETATTRIPTO is not present but tbIPSETATTRCIDR exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but...

PT-2024-11294 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from the tcf skbmod act function assuming that packets use Ethernet as their L2 protocol, which is not always the case. This can lead to silent corruption of packets...

Malicious code in tkcaendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e47063955bce27842f4da6dac58c8104eaefdf470e523858772657fe961606f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressbarr2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ae6c433ee971e37762bf2323a3997615b8ce0a862b4340dc5b8df5d8637eabb1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progresbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cde7b3083bf6f1b9e297dd07ceccaf0d422435ff6a262ff42f5c993010da4112 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in proressbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f11c4702116e59a5d221bdb8e12d7ded5540de75ca00174b50112491f24fdee8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psyocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10480265c893bd8a305946e7a2b40f67d3dd8b2f28d94762de4d1b3d27fe6e87 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psuutil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 71840b4eaafce178353cc51cd2db42fd77b71973710b0701befec4bebc249ef4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rquests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51be2a24f650a0b1d3d6d85b08b9106249116f61e0f6c611c94d20f36e1797d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in simpejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e65283d58f55003864ced6f01e17b127407e80175f3f30c3df5f0ebe8fd849a1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in webssocket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ab9db3d073f75960b5744c1b645d87108a2e1ae1541875e7506962a324072d6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websoccket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6bdf6be6543d1f9f106cc20903d6dacaf41d21adba4e46f532805600a52c7eee Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in aiottp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7d640c3ffe3e8d283b517e165e1b9b4f558bbfe04ae662262c0988cd606f26fe Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pygamme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56d94a718f5ad009be706a22e0638abd24db39d417c918acaf8a135afc7d1760 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sciikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1dab0ece19ca18c5c44ea1a63c8cb62b502c067a974998e100ab8622fae12966 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tnsorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 012a82a583dfee04747eacb6189b348429f8cdb0186a238b23c096d4e361932e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in teensorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0a2ff806f353099e45e280a9b7aaafd122299635b37541ddd0b931719467693f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in matpllotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 931d4dd01745b68532886db2d5f279412797cf5a035defd50c2313fe07b92114 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...