15444 matches found
USN-7323-1: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...
CVE-2025-27643
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006...
Amazon AppStream 2.0 < 1.1.1332 MITM
The version of Amazon AppStream 2.0 installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
Vasion Print 信任管理问题漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. Vasion Print has a security vulnerability that stems from the presence of hard-coded AWS API keys...
JavaGhost Uses Amazon IAM Permissions to Phish Organizations
Unit 42 uncovers JavaGhost's evolving AWS attacks. Learn how this threat actor uses phishing, IAM abuse, and advanced…...
Malicious code in aws-ui-component-select (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dccf55adacf1d8f07bd95ddca3f474ac9b53ffa48455ff2cbb23352bd0055add Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a4e17673b58fae37b25deaea3bf55c6fdb9a69285dde321917e6e775d7cdf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2086 Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a4e17673b58fae37b25deaea3bf55c6fdb9a69285dde321917e6e775d7cdf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail
Threat actors are targeting Amazon Web Services AWS environments to push out phishing campaigns to unsuspecting targets, according to findings from Palo Alto Networks Unit 42. The cybersecurity company is tracking the activity cluster under the name TGR-UNK-0011 short for a threat group with...
Malicious code in amazon-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in amazon-user (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1724 Malicious code in amazon-user (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in amazon-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1723 Malicious code in amazon-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1722 Malicious code in amazon-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in amazon-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in amazon-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e065ee96bedcccbc1d717b33f9111467a598d6dd2b02fe1fdc4447ffee42a2f The OpenSSF Package Analysis project identified 'amazon-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...
MAL-2025-1721 Malicious code in amazon-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e065ee96bedcccbc1d717b33f9111467a598d6dd2b02fe1fdc4447ffee42a2f The OpenSSF Package Analysis project identified 'amazon-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...