14408 matches found
MAL-2024-972 Malicious code in internal-corp-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...
Malicious code in internal-corp-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...
Digital Experience Monitoring | What Is DEM?
Introduction to Digital Experience Monitoring: Illuminating the Basics In an era governed by technology, the satisfaction of an end-user is of utmost importance. It has the power to stimulate or to halt business growth, and frequently determines if a client continues or discontinues their...
Malicious code in discord.js-commandv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-976 Malicious code in discord.js-commandv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in @ssr-frontend/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-21624
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the amdgpu dm fini function. The adev-dm.dc variable might be NULL before the call to dc enable dmub notifications, which...
Exploring the (Not So) Secret Code of Black Hunt Ransomware
It seems like every week, the cybersecurity landscape sees the emergence of yet another ransomware variant, with Black Hunt being one of the latest additions. Initially reported by cybersecurity researchers in 2022, this new threat has quickly made its presence known. In a recent incident, Black...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I w...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I w...
Argus - A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions
This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive security analysis tool specifically designed for GitHub Actions. Built with an aim to enhance the security of CI/CD...
MAL-2024-971 Malicious code in jera (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb23042fd58a78e938674a631ab67c9e3f5df50007c0ae2088da7c6da59e9805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-961 Malicious code in cifuzz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7377471f095cc9fc80601acc697c994417df898d009b1cb5fa4c14ca198ae15 The OpenSSF Package Analysis project identified 'cifuzz' @ 1.2.0 npm as malicious. It is considered malicious because: - The package communicate...
MAL-2024-970 Malicious code in discord.js-commandsv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665 The OpenSSF Package Analysis project identified 'discord.js-commandsv14' @ 1.0.4 npm as malicious. It is considered malicious because: - The...
Exploit for Command Injection in Ivanti Connect_Secure
Introduction š This repository contains a Python script desi...
Nemesis - An Offensive Data Enrichment Pipeline
Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal with Nemesis was to create a centralized data processing platform that ingests data produced during offensive security assessments. Nemesis aims to automate a number of...
Exploit for Server-Side Request Forgery in Ivanti Connect_Secure
CVE-2024-21893 is server-side request forgery vulnerability in...
MAL-2024-957 Malicious code in ccl-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39e730f4f56209fb93dff1d5b08b4aef3031c600f8402df5d61b00e9f19a41e0 The OpenSSF Package Analysis project identified 'ccl-modal' @ 2.3.0 npm as malicious. It is considered malicious because: - The package...
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...
Optimizing Data Lakes: Streamlining Storage with Effective Object Management
Data lakes are a popular solution for data storage, and for good reason. Data lakes are flexible and cost effective, as they allow multiple query engines and many object formats without the need to manage resources like disks, CPUs, and memory. In a data lake, data is simply stored in an object...