14416 matches found
Malicious code in cdp-ops--ts-accesslog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...
MAL-2023-1130 Malicious code in cdp-ops--ts-accesslog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...
Malicious code in snew-classic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ac296eeaba98c7d28c3be79bec7f5ca26b13e1b576956695d24f12d232f7c89 The OpenSSF Package Analysis project identified 'snew-classic-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in dragonsense-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b16039afbf251f78d8c6adf4bb07342e8c112167bef9e0749651dacbdaf12c26 The OpenSSF Package Analysis project identified 'dragonsense-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in dragonconnect-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20e247592dd8735f170e77329b3ef9ae7fa59a57437134b4e0e501cc3a395531 The OpenSSF Package Analysis project identified 'dragonconnect-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2023-1179 Malicious code in fabric-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in fabric-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in js-integration-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf524832b5a7754384bb05dae5fb10558591f104915c2f9b5518db338003a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Gvectors Wpforo_Forum
Original Proof of Concept for CVE-2023-2249 - Proof of Concep...
Skuld: The Infostealer that Speaks Golang
Skuld: The Infostealer that Speaks Golang By Ernesto Fernández Provecho · June 13, 2023 In May 2023, the Trellix Advanced Research Center discovered a new Golang stealer, known as Skuld, that compromised systems worldwide, something that security researchers had also noticed. The usage of Golang,...
Siemens Solid Edge
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Exploit for SQL Injection in Progress Moveit_Cloud
It is an exploit module for MOVEit Transfer. The vulnerability i...
C2-Hunter - Extract C2 Traffic
C2-Hunter C2-Hunter is a program designed for malware analysts to extract Command and Control C2 traffic from malwares in real-time. The program uses a unique approach by hooking into win32 connections APIs. With C2-Hunter, malware analysts can now intercept and analyze communication in real-time...
Bypass-Sandbox-Evasion - Bypass Malware Sandbox Evasion Ram Check
Sandboxes are commonly used to analyze malware. They provide a temporary, isolated, and secure environment in which to observe whether a suspicious file exhibits any malicious behavior. However, malware developers have also developed methods to evade sandboxes and analysis environments. One such...
Threat Roundup for June 2 to June 9
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between June 2 and June 9. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
Analyzing the FUD Malware Obfuscation Engine BatCloak
We look into BatCloak engine, its modular integration into modern malware, proliferation mechanisms, and interoperability implications as malicious actors take advantage of its fully undetectable FUD capabilities...
Detect and Prioritize Identity-Related Cloud Risk with InsightCloudSec
In modern cloud environments, roles and permissions are assigned not just to human users, but to machines, resources and services, as well. The massive scale of cloud environments leads to teams potentially managing millions of distinct identities. As a result, security teams often struggle to...
CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances
Rapid7 incident response teams are investigating exploitation of physical Barracuda Networks Email Security Gateway ESG appliances dating back to at least November 2022. As of June 6, 2023, as part of an ongoing product incident response, Barracuda is urging ESG customers to immediately...
Wireshark Buffer Overflow Vulnerability (CNVD-2023-62287)
Wireshark is a network packet analysis tool. The tool is mainly used to capture network packets and automatically parses the packets to display detailed information about the packets for users to analyze. Wireshark suffers from a buffer overflow vulnerability that can be exploited by an attacker ...
