MAL-2024-999 Malicious code in wickrserverdirectory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f730645eb2725e8a803ead1923d965ab8417efbdfb226db5f57117a42010263b The OpenSSF Package Analysis project identified 'wickrserverdirectory' @ 6.37.8 npm as malicious. It is considered malicious because: - The...

Do Any HTTP Clients Not Support SNI?

In this blog post, we’ll share the results of an internal research project we conducted on our CDN customers focused on websites that are getting non-Server Name Indication SNI traffic. The goal of our research was to answer the following questions: How much non-SNI traffic is seen? What is the...

MAL-2024-989 Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

Fedora: Security Advisory for wireshark (FEDORA-2024-fdc7dfb959)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-991 Malicious code in crumpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42425457cf6a4b96a2353dfbbab52426f6a871b0db230861f31e6b68513b37da The OpenSSF Package Analysis project identified 'crumpet' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicat...

Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

The operators of Raspberry Robin are now using two new one-day exploits to achieve local privilege escalation, even as the malware continues to be refined and improved to make it stealthier than before. This means that "Raspberry Robin has access to an exploit seller or its authors develop the...

Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

Introduction The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest...

MAL-2024-984 Malicious code in prism-commercial-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078 The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 npm as malicious. It is considered malicious because: - The...

IBM Engineering Lifecycle Optimization Security Vulnerability

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from International Business Machines IBM. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that...

The vulnerability of the OLE2 form file analysis component in the ClamAV antivirus program allows a hacker to trigger a service failure.

The vulnerability of the OLE2 file analysis component in the ClamAV antivirus program lies in the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted OLE2 file...

Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations

Get a detailed analysis of the entire attack chain of Microsoft's breach by Midnight Blizzard APT29, as well as detection and mitigation recommendations...

MAL-2024-993 Malicious code in privdel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edd03ccc68c5b01bcfcb939f4794749d8c8a797d45611b86636883add7bb5b44 The OpenSSF Package Analysis project identified 'privdel' @ 1.999.0 npm as malicious. It is considered malicious because: - The package executes...

Qolsys IQ Panel 4, IQ4 HUB

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION : Low attack complexity Vendor : Qolsys, Inc. Equipment : IQ Panel 4, IQ4 Hub Vulnerability : Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the panel...

GHSA-52XQ-J7V9-V4V2 Vyper negative array index bounds checks

Summary Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. Typically, negative integers are filtered out at runtime by the bounds checker, but small enough i.e. large...

kernel: DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c

A memory corruption flaw was found in the Linux kernel’s Netfilter subsystem in the way a local user uses the libnetfilterqueue when analyzing a corrupted network packet. This flaw allows a local user to crash the system or a remote user to crash the system when the libnetfilterqueue is used by a...

BounceBack - Stealth Redirector For Your Red Team Operation Security

BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic analysis through various filters and their combinations to hide your tools from...

MAL-2024-975 Malicious code in @bughunter0007/packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7917dfb8691c19dbb896a26b03004bfa6ac280745ce23f44939f929faffbc94 The OpenSSF Package Analysis project identified '@bughunter0007/packages-analytics' @ 1.2.2 npm as malicious. It is considered malicious because...

Malicious code in @bughunter0007/packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7917dfb8691c19dbb896a26b03004bfa6ac280745ce23f44939f929faffbc94 The OpenSSF Package Analysis project identified '@bughunter0007/packages-analytics' @ 1.2.2 npm as malicious. It is considered malicious because...

MAL-2024-973 Malicious code in packages-analytic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-972 Malicious code in internal-corp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...