MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA and International Partners Release Malware Analysis Report on Infamous Chisel Mobile Malware

Today, the United Kingdom’s National Cyber Security Centre NCSC-UK, the United States’ Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, and Federal Bureau of Investigation FBI, New Zealand’s National Cyber Security Centre NCSC-NZ, the Canadian Centre for Cyber...

MAL-2023-7956 Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7945 Malicious code in apirsagenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f51b19a4947481fd079e1c85356977c4b103a7bde3938185a453b35db4f94ff4 The OpenSSF Package Analysis project identified 'apirsagenerator' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in apirsagenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f51b19a4947481fd079e1c85356977c4b103a7bde3938185a453b35db4f94ff4 The OpenSSF Package Analysis project identified 'apirsagenerator' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

A suspected Chinese-nexus hacking group exploited a recently disclosed zero-day flaw in Barracuda Networks Email Security Gateway ESG appliances to breach government, military, defense and aerospace, high-tech industry, and telecom sectors as part of a global espionage campaign. Mandiant, which i...

MAL-2023-7944 Malicious code in @cybs-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25c2aa7aae39d30717302a7e0a6b94336a286f1167456157770d53c08d9ba99 The OpenSSF Package Analysis project identified '@cybs-ui/components' @ 7.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7943 Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...

Validating input parameters with the max value of uint

Lines of code Vulnerability details Impact Validating input values with uint256.max will not revert in any condition as solidity v0.8.0 reverts on overflow and underflow. Detailed description of the impact of this finding. Due to solidity v0.8.0 which reverts on overflow and underflow of integer...

CVE-2023-26095

CVE-2023-26095 affects Stormshield Network Security (SNS): ASQ in SNS versions 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 crashes when processing a crafted SIP packet. Root cause not detailed in the provided documents. Remediation: upgrade to SNS 4.3.16 or 4.6.3 (as applicable). Exploit informat...

Lack of events in EvolvingProteus contract

Lines of code Vulnerability details Impact There is no event emitted in the whole contract, even after executing sensitive actions like swaps between assets or at the constructor. That is bad because many automatic tools that monitors the contracts deployed rely on them. For example, see the swap...

Wireshark Denial of Service Vulnerability (CNVD-2023-72254)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

MAL-2023-7919 Malicious code in aws-encryption-sdk-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in ux-authentication-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acc992350d87b94d42d60618d28b4f1111d7b55add45c9262f23033782743741 The OpenSSF Package Analysis project identified 'ux-authentication-auth0' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

PT-2023-5458 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions 8.5.6 and prior Description: The issue is related to a global buffer read overflow in the CharDistributionAnalysis::HandleOneChar function. This may potentially be used to leak internal memory allocation information. The...