Apache Doris Authorization Issues Vulnerability

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris suffers from an authorization issue vulnerability that stems from api /api/snapshot and /api/getlogfile allowing...

Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8710 Malicious code in biobot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b2c26ec52eb2c7fbc6aca147f99990d56fd9eb9c51517b6b3aa7f41755adb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zerocopy: Some Ref methods are unsound with some type parameters

The Ref methods intoref, intomut, intoslice, and intoslicemut are unsound and may allow safe code to exhibit undefined behavior when used with Ref where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut. See...

Rhadamanthys Malware: Swiss Army Knife of Information Stealers Emerges

The developers of the information stealer malware known as Rhadamanthys are actively iterating on its features, broadening its information-gathering capabilities and also incorporating a plugin system to make it more customizable. This approach not only transforms it into a threat capable of...

MAL-2023-8706 Malicious code in index.marko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 336343a184ccf4402e0278fcf3e2dbae7c666c71d9348b07ccf376b161570c9a The OpenSSF Package Analysis project identified 'index.marko' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell true positive This is a simple web project with a...

Malicious code in app-next-example-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ca79ef64add6f7047e7d406bfa4128511f415f4e21c16722d1da3c6d4d14721 The OpenSSF Package Analysis project identified 'app-next-example-plugin' @ 3.3.3 npm as malicious. It is considered malicious because: - The...

Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut

This advisory is also published as RUSTSEC-2023-0074. The Ref methods intoref, intomut, intoslice, and intoslicemut are unsound and may allow safe code to exhibit undefined behavior when used with Ref where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B type...

Malicious code in primeng-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5db0733e63e7005d9395916c8fe50701981527ec8471164b58588a92937388a The OpenSSF Package Analysis project identified 'primeng-layout' @ 8.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8695 Malicious code in primeng-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5db0733e63e7005d9395916c8fe50701981527ec8471164b58588a92937388a The OpenSSF Package Analysis project identified 'primeng-layout' @ 8.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8694 Malicious code in twk-boilerplate-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e55b9fb271d1d1fcc3ac27783bc95ed7cbce8762d35cd7f2635490e25b9263b The OpenSSF Package Analysis project identified 'twk-boilerplate-template' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-8693 Malicious code in katal-sellercentralhmdsupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8cdaad58325a54ebb6ba494e3d88fa6051937fe7092ef20c1f13db2c3fc8de54 The OpenSSF Package Analysis project identified 'katal-sellercentralhmdsupport' @ 70.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in katal-sellercentralhmdsupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8cdaad58325a54ebb6ba494e3d88fa6051937fe7092ef20c1f13db2c3fc8de54 The OpenSSF Package Analysis project identified 'katal-sellercentralhmdsupport' @ 70.0.0 npm as malicious. It is considered malicious because: -...

Johnson Controls Kantech Gen1 ioSmart

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable from adjacent network Vendor : Sensormatic Electronics, LLC, an affiliate of Johnson Controls Inc. Equipment : Kantech Gen1 ioSmart card reader Vulnerability : Missing Release of Memory after Effective Lifetime 2. RISK EVALUATION...

TEST HIGH

Lines of code L1 Vulnerability details TEST --- The text was updated successfully, but these errors were encountered: All reactions...

Malicious code in @dle-multiform-angular-component/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 820657ccb39c885de6a5d6006ee75064ffa46699e8af105375b12a67436649fc The OpenSSF Package Analysis project identified '@dle-multiform-angular-component/core' @ 13.0.1 npm as malicious. It is considered malicious...

MAL-2023-8691 Malicious code in @dle-clo-bento-component/dist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a652e8cb279a3db5d1420008c3f3fc8c11aab4463f7ed61925ca409f18066b19 The OpenSSF Package Analysis project identified '@dle-clo-bento-component/dist' @ 13.0.0 npm as malicious. It is considered malicious because: -...

How to Analyze Malware's Network Traffic in A Sandbox

Malware analysis encompasses a broad range of activities, including examining the malware's network traffic. To be effective at it, it's crucial to understand the common challenges and how to overcome them. Here are three prevalent issues you may encounter and the tools you'll need to address the...

Atos Unify OpenScape Authentication Bypass / Remote Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Argument injection leading to unauthenticated RCE and authentication bypass product: Atos Unify OpenScape Session Border Controller SBC Atos Unify OpenScape Branch Atos...