MAL-2024-1179 Malicious code in region-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 257c0698203a7d5e178b36eb11760380fab35761c1c54cf601b5f404f170eb8e The OpenSSF Package Analysis project identified 'region-optimizer' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @fin-php/npms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c46ddecabc6ffdb6fdcfe2d30dab50567e26874350c888ee02dd2869fb42124 The OpenSSF Package Analysis project identified '@fin-php/npms' @ 9.10.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1175 Malicious code in mytmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676558f1795470bc642910cfcb649425633481aa4c72864aa4354baa183ee115 The OpenSSF Package Analysis project identified 'mytmobile' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...

Radamsa - A General-Purpose Fuzzer

Radamsa is a test case generator for robustness testing, a.k.a. a fuzzer. It is typically used to test how well a program can withstand malformed and potentially malicious inputs. It works by reading sample files of valid data and generating interestringly different outputs from them. The main...

Fedora: Security Advisory (FEDORA-2024-a966a6485e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-4115ab9959)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1145 Malicious code in odyssey-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...

Pentest-Muse-Cli - AI Assistant Tailored For Cybersecurity Professionals

Pentest Muse is an AI assistant tailored for cybersecurity professionals. It can help penetration testers brainstorm ideas, write payloads, analyze code, and perform reconnaissance. It can also take actions, execute command line codes, and iteratively solve complex tasks. Pentest Muse Web App In...

PYSEC-2024-257

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In version 3.9.5 Beta and prior, MobSF does not perform any input validation when extracting the hostnames in android:host, so requests can also ...

CVE-2024-29190 MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In version 3.9.5 Beta and prior, MobSF does not perform any input validation when extracting the hostnames in android:host, so requests can also ...

Malicious code in u-workflow.module.common.brand-safety (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 558ded355ca9595181f6d90b983a24679d51338462455e987540da8991afda50 The OpenSSF Package Analysis project identified 'u-workflow.module.common.brand-safety' @ 1.0.1 npm as malicious. It is considered malicious...

MAL-2024-1138 Malicious code in u-workflow.module.common.features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43c063fa58fdcf0f64acc12e433390c9dc078ab6b6eb6dd773242db454f29a47 The OpenSSF Package Analysis project identified 'u-workflow.module.common.features' @ 1.0.1 npm as malicious. It is considered malicious because...

Advantech WebAccess/SCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Advantech Equipment : WebAccess/SCADA Vulnerability : SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

Azure Bill Forecast High After Subscribing to Veeam Data Cloud

Challenge After subscribing to Veeam Data Cloud for Microsoft 365 via Microsoft Marketplace, the Cost Analysis chart within the Microsoft Azure portal displays a forecasted future cost much higher than expected. Cause The forecast chart in the Cost Analysis tile uses a simplified algorithm for...

Securing the Cloud Together: Wiz and Splunk team up to secure your cloud resources

Use the Wiz App to consume and analyze data more easily in Splunk via a dedicated dashboard...

MultiDump - Post-Exploitation Tool For Dumping And Extracting LSASS Memory Discreetly

MultiDump is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly, without triggering Defender alerts, with a handler written in Python. Blog post: https://xre0us.io/posts/multidump MultiDump supports LSASS dump via ProcDump.exe or comsvc.dll, it offers two...

MAL-2024-1132 Malicious code in caas-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6944959a95e6d1bd73a53289912b43eed0d1855c541983e98a204359c5df0ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: A security vulnerability has been identified in Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2023-36478)

Summary There is a potential denial of service in Eclipse Jetty that is used by Apache Solr shipped with IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID:CVE-2023-36478 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an integer overflow and buffer...

Security Bulletin: A Bouncy Castle vulnerability has been identified in Apache Solr and Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2023-33201)

Summary There is a potential injection vulnerability in Bouncy Castle that is used by Apache Solr and Logstash. This has been addressed Vulnerability Details CVEID:CVE-2023-33201 DESCRIPTION: The Bouncy Castle Crypto Package For Java bc-java could allow a remote attacker to obtain sensitive...