GE Digital CIMPLICITY

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low attack complexity Vendor: GE Digital Equipment: CIMPLICITY Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted...

MAL-2023-1080 Malicious code in @hihihehehaha/vgujsonfrankfurtola (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97abddac90750ebdebe8b52bdb02e50b71a485c334f2d81943eb09ed0ad24749 The OpenSSF Package Analysis project identified '@hihihehehaha/vgujsonfrankfurtola' @ 2.5.0 npm as malicious. It is considered malicious because...

Wireshark iSCSI Parser Denial of Service Vulnerability

Wireshark is a set of network packet analysis software from the Wireshark Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in Wireshark versions 4.0.0 to 4.0.6, which stems from not proper...

WordPress Word Count Analysis Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Word Count Analysis Type Plugin Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 056e051a5bca Credits Rafie Muhammad Patchstack...

Malicious code in @hubportal/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5339f716a6209e3408d4781031aabf5634245533ce5d1ba42df2f82e912e622 The OpenSSF Package Analysis project identified '@hubportal/sdk' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

PT-2023-10358 · Undefined · Undefined

ParsedReport ChatGPT Translated Autotext: RSTReportsAnalyser + ChatGPT + Google Translate|DeepL ------ Основная идея: В данной статье рассматривается недавняя активность GuLoader или ModiLoader/DBatLoader и приводятся индикаторы компрометации IOC для заражения Formbook "QM18". В статье также...

Malicious code in openai-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae52243725fa671be1294e1a3747581764b2e74d9c499e0ac249b03676d0dbf The OpenSSF Package Analysis project identified 'openai-beta' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1259 Malicious code in openai-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae52243725fa671be1294e1a3747581764b2e74d9c499e0ac249b03676d0dbf The OpenSSF Package Analysis project identified 'openai-beta' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

Malicious code in naveen4gem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f434b9b8cbf657627010562fe56245ba16cc930cdd82258625fd29bab68205c The OpenSSF Package Analysis project identified 'naveen4gem' @ 1.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in naveengem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12a3ed7380fdb815c2f8c5a086b33d516acc0bbdaab4d4df8203efed20ae348b The OpenSSF Package Analysis project identified 'naveengem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Akamai’s Perspective on July’s Patch Tuesday 2023

...

JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2023-62630)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

MAL-2023-1199 Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

CVE-2023-30563

A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session...

Exploit for Type Confusion in Google Chrome

CVE-2022-4262 Full Analysis including roo...

Siemens SIMATIC CN 4100

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC CN 4100 Vulnerabilities: Improper Access Control, Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...

Fedora: Security Advisory for rizin (FEDORA-2023-3dc1f9ba12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Lack of check for zero address in the function _transferOwnership before transferring ownership

Lines of code Vulnerability details Impact The absence of a check for the zero address address0 when transferring ownership can lead to unintended consequences and potential fund loss. If the contract allows transferring ownership to the zero address address0, it effectively means relinquishing...

Detecting BPFDoor Backdoor Variants Abusing BPF Filters

An analysis of advanced persistent threat APT group Red Menshen’s different variants of backdoor BPFDoor as it evolves since it was first documented in 2021...