Malicious code in angular-mep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 681355ff3db8d03fa0216e4ff152cb0be7e3cd485423c68fc2d3b33c8feae3a5 The OpenSSF Package Analysis project identified 'angular-mep' @ 1.3.0 npm as malicious. It is considered malicious because: - The package...

An error could lead to coins not being returned to user

Lines of code Vulnerability details Impact The function swapCoins does check that SendCoins does receive them correctly here but not when sending them to the user here Proof of Concept If there is an error returning the swapped coins to the user, they will remain locked. There is no history of...

Lack of deep validation

Lines of code Vulnerability details Impact The validate functions are just checking the parameters type without checking any further information Proof of Concept They are just trying to cast the value with i.TYPE and check if there is an error. There is no further validations e. g...

Lack of input validation

Lines of code Vulnerability details Impact There is no input sanitizer implemented for the transfertypes.FungibleTokenPacketData data variable. Proof of Concept After "unmarshaling" the packet, which checks if there is an error, it is used right away without further checking the fields inside it,...

Bypass check with one non-standard denom

Lines of code Vulnerability details Impact Wrong conditional when checking for non-standard denoms Proof of Concept The conditional is used to sanitize if the denom1 and denom2 are indeed standardDenom see the error in the next line. However, the condition can be bypassed with one of them being...

Video: How Talos’ open-source tools can assist anyone looking to improve their security resilience

Cisco Talos remit is not just to protect our customers from cyber attacks. We also strive to make the internet a better and safer place. Thats one of the reasons why we create and release open-source software, for free. These tools are available to anyone in the security community to enhance thei...

Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1235 Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in workfront-typescript-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f6635deb487ad3ada4485d2a185c815895af90e8a87da476ce19f4c37ef0d1f The OpenSSF Package Analysis project identified 'workfront-typescript-definitions' @ 1.1.1 npm as malicious. It is considered malicious because:...

WordPress BookIt 2.3.7 Authentication Bypass

On May 22, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in StylemixThemes’s BookIt plugin, which is actively installed on more than 10,000 WordPress websites. The vulnerability makes it possible for...

Enphase Installer Toolkit Android App

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Enphase Equipment: Enphase Installer Toolkit Vulnerability: Use of Hard-coded Credentials 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory titled...

Exploit for Improper Privilege Management in Sudo_Project Sudo

CVE-2023-22809 Analysis & Exploit Basic Information V...

ROS-20230620-04

The vulnerability of the traffic analysis program Wireshark is related to the failure to properly control the consumption of internal resources in the LISP dissector. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause resource exhaustion and perform a...

Malicious code in ent-memberassistance-helppopup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 617211f3573ab14bc57da3efe5ce49c8ed667e590c643d1a62fbe680ab531b48 The OpenSSF Package Analysis project identified 'ent-memberassistance-helppopup' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-1330 Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1329 Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

New Mystic Stealer Malware Targets 40 Web Browsers and 70 Browser Extensions

A new information-stealing malware called Mystic Stealer has been found to steal data from about 40 different web browsers and over 70 web browser extensions. First advertised on April 25, 2023, for $150 per month, the malware also targets cryptocurrency wallets, Steam, and Telegram, and employs...

GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845

This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...