MAL-2024-86 Malicious code in shoponline.epiroc.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively

Introduction In the vast landscape of cybersecurity, staying vigilant against potential threats is crucial. A critical vulnerability that surfaced recently is CVE-2023-50164, affecting Apache Struts 2, a widely used open-source framework for Java development. This path traversal vulnerability,...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for module.libomp, module.llvm, clang, libomp, llvm, module.clang, module.compiler-rt, compiler-rt, python-lit, module.lld, module.lldb, module.python-lit, lldb, lld. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

4 Questions for CISOs to Reduce Threat Exposure Risk

In an ongoing effort to help security organizations gain greater visibility into threat exposure risk, we have determined four key questions every CISO should be considering based on our understanding of the recommendations of a new report from Gartner®. The report, 2024 Strategic Roadmap for...

Horner Automation Cscape

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Horner Automation Equipment : Cscape Vulnerability : Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3. TECHNICAL...

MAL-2024-60 Malicious code in @neogov/linkanx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 133eddd55383f57d0ee29c0a3eb7343b9118e95d6c54ab71bb75aa457dd5d2d0 The OpenSSF Package Analysis project identified '@neogov/linkanx' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94d087127b055251bef2c40e4c884c82c7f4e39f4631fa5995116fb9b1d65f4f The OpenSSF Package Analysis project identified 'test-devoxx' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-55 Malicious code in internal-test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...

Malicious code in sourcify-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9df2af027b2402dd66d002eec5cfbf3b37918861883becfce5f43127483c9be The OpenSSF Package Analysis project identified 'sourcify-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

MAL-2024-52 Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

Exploit for Path Traversal in Thinkphp

redtail While analyzing my daily access.log report, I noticed...

Malicious code in demo-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ee37cdc93b14e892899627c645c7fd80fcc18ea968522ffa87ed65ddcb5061b The OpenSSF Package Analysis project identified 'demo-store' @ 4.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2024-50 Malicious code in optimistic-cart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-49 Malicious code in vg-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d995efbd124e2109bc610be152ba4a331cb7d256d3a70d5df78498e416cffbc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mastercard Cybersecurity

Safeguarding Trade: Discovering the World of Mastercard Digital Guardrails In our tech-driven era, it is vitro important that financial dealings are shielded competently. A colossal number of exchanges are happening each day, proving the ever growing necessity of sturdy digital protective measure...

Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-48 Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-64 Malicious code in j5-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac2e249ebbccb3255a8760bd35b3e6fd100192fe0801b54e53231a71a0789a1 The OpenSSF Package Analysis project identified 'j5-test' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes o...

GTKWave FST fstReaderIterBlocks2 vesc allocation integer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1790 GTKWave FST fstReaderIterBlocks2 vesc allocation integer overflow vulnerability January 8, 2024 CVE Number CVE-2023-35992 SUMMARY An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115,...