Malicious code in bubble-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis de676130e5f20504bbb50fd8fdbed9113a13ef5cb82cb7989dfdd28a8bfb4f42 The OpenSSF Package Analysis project identified 'bubble-dev' @ 50.1.1 npm as malicious. It is considered malicious because: - The package...

CanaryTokenScanner - Script Designed To Proactively Identify Canary Tokens Within Microsoft Office Documents And Acrobat Reader PDF (docx, xlsx, pptx, pdf)

Detecting Canary Tokens and Suspicious URLs inMicrosoft Office, Acrobat Reader PDF and Zip Files Introduction In the dynamic realm of cybersecurity, vigilance and proactive defense are key. Malicious actors often leverage Microsoft Office files and Zip archives, embedding covert URLs or macros to...

Vulnerability of software for analyzing computer system resource usage in Intel System Usage Reports, related to improperly used standard permissions, allows attackers to increase their privileges.

The vulnerability of software for analyzing computer system resources in the Intel System Usage Report is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Malicious code in is24-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f924b1c86b042837547c3f1942013a3f4b791af2a22914a1694ba2a0b90b61a The OpenSSF Package Analysis project identified 'is24-desktop' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

From Alert to Action: How to Speed Up Your SOC Investigations

Processing alerts quickly and efficiently is the cornerstone of a Security Operations Center SOC professional's role. Threat intelligence platforms can significantly enhance their ability to do so. Let's find out what these platforms are and how they can empower analysts. The Challenge: Alert...

Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

MAL-2024-1037 Malicious code in virtuoso-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e312940c270bdfe72147c1582e1a07fef45096820038e878c4f91bdd444c03dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-51392

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks...

Hardcoded credentials

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks...

CVE-2023-51392 Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks...

CVE-2023-51392 Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM

Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks...

Signal21 Beta Launch Bridges Gap in Blockchain Intelligence Services

By Uzair Amir Signal21, Inc., a blockchain intelligence and data analysis platform, has announced its beta launch marking a significant milestone… This is a post from HackRead.com Read the original post: Signal21 Beta Launch Bridges Gap in Blockchain Intelligence Services...

TruRisk™️ Insights – The Story Behind a TruRisk Score

In the world of cloud and SaaS security, where risks arise not only from vulnerabilities but also from misconfigurations and various threats, the task of prioritizing and managing them becomes increasingly complex. Its not just about identifying vulnerabilities; its also crucial to recognize and...

TinyTurla-NG in-depth tooling and command and control analysis

Cisco Talos, in cooperation with CERT.NGO, has discovered new malicious components used by the Turla APT. New findings from Talos illustrate the inner workings of the command and control C2 scripts deployed on the compromised WordPress servers utilized in the compromise we previously disclosed...

Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Delta Electronics CNCSoft-B DOPSoft

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B DOPSoft Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code...

GHSA-24RP-Q3W6-VC56

creationtimestamp| type| source ---|---|--- 2024-02-22 00:46:22+00:00| seen| https://t.me/ctinow/190263 2024-02-22 12:46:47+00:00| seen| https://t.me/ctinow/190682 2024-02-22 18:57:59+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4002 2025-06-12 16:34:43+00:00|...

Cisco Secure Endpoint Buffer Overflow Vulnerability

Cisco Secure Endpoint Cisco AMP for Endpoints is the United States Cisco Cisco company's set of integrated static and dynamic malware analysis and threat intelligence in one of the endpoint applications. A buffer overflow vulnerability exists in the Cisco Secure Endpoint Connector for Windows...

CVE-2024-23346

Pymatgen Python Materials Genomics is an open-source Python library for materials analysis. A critical security vulnerability exists in the JonesFaithfulTransformation.fromtransformationstr method within the pymatgen library prior to version 2024.2.20. This method insecurely utilizes eval for...

CVE-2024-23346

Pymatgen Python Materials Genomics is an open-source Python library for materials analysis. A critical security vulnerability exists in the JonesFaithfulTransformation.fromtransformationstr method within the pymatgen library prior to version 2024.2.20. This method insecurely utilizes eval for...