Health Industry Cybersecurity Best Practices 2023

This blog explains the new resources of health industry cybersecurity practices and landscape analysis which the HHS U.S. Department of Health and Human Services released in Apr 2023...

CVE-2023-2868

A remote command injection vulnerability exists in the Barracuda Email Security Gateway appliance form factor only product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file tape archives. The vulnerability ste...

Malicious code in pack-123-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147b1fbc2985e829ebc40869208b16815788e67b83a8670679e6399dd6515755 The OpenSSF Package Analysis project identified 'pack-123-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

MAL-2023-1349 Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

Malicious code in client-ws-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32231907789db551e533776ab68a4a01f4029a0723291d70d65927559eb647d2 The OpenSSF Package Analysis project identified 'client-ws-app' @ 5.20.20 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1265 Malicious code in payouts-sdk-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3db91ea244189b9afd98f67f2aa7ce4dd00812c2ab83bba670a7f9d285cf167 The OpenSSF Package Analysis project identified 'payouts-sdk-samples' @ 99.20.20 npm as malicious. It is considered malicious because: - The...

MAL-2023-1213 Malicious code in int_access_worldpay_sfra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97111e27f0fa3c0c573ceec6fba991c479ff7517b8043bdce5bb5150aa6644e8 The OpenSSF Package Analysis project identified 'intaccessworldpaysfra' @ 99.19.19 npm as malicious. It is considered malicious because: - The...

CISA and Partners Update the #StopRansomware Guide, Developed through the Joint Ransomware Task Force (JRTF)

Today, CISA, the Federal Bureau of Investigation FBI, the National Security Agency NSA, and the Multi-State Information Sharing and Analysis Center MS-ISAC published an updated version of the StopRansomware Guide, as ransomware actors have accelerated their tactics and techniques since its initia...

MAL-2023-1256 Malicious code in obao-digital-pnm-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2851227329c005fd686d849285f05ca10150bec82a22a0281a74c4cf091f3d8b The OpenSSF Package Analysis project identified 'obao-digital-pnm-ui' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2023-25946

Authentication bypass vulnerability in Qrio Lock Q-SL2 firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product's communication data and conduct an arbitrary operation under certain conditions...

Check if the token of projectId matches the projectToken of the JBXBuybackDelegate

Lines of code Vulnerability details Impact At line 202, the amountReceived returned by the swap function is based on the projectToken defined in JBXBuybackDelegate. This will incorrectly trigger the mint function and because there is no verification of projectToken, it will mistakenly mint...

Invalid

Lines of code Vulnerability details Assessed type Other --- The text was updated successfully, but these errors were encountered: All reactions...

The vulnerability of the Ribose RNP library in the Thunderbird email client allows a hacker to cause a service failure.

The vulnerability of the Ribose RNP library in the Thunderbird email client is related to insufficient validation of input data during the analysis of PKESK/SKESK packets. Exploiting this vulnerability could allow a malicious actor to cause service failures...

MAL-2023-1333 Malicious code in uurl-search-params (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d4a4d5977377ebf7c79b1bcb7c824cb6f1bb64c2151b065d2e189c27638d15d The OpenSSF Package Analysis project identified 'uurl-search-params' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in uurl-search-params (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d4a4d5977377ebf7c79b1bcb7c824cb6f1bb64c2151b065d2e189c27638d15d The OpenSSF Package Analysis project identified 'uurl-search-params' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

eth is being sent to an arbitrary user

Lines of code Vulnerability details Impact unauthorized access to this function could lead to unauthorized balance modifications Dangerous calls: — jbxTerminal.addToBalanceOfvalue: data.amount.valuedata.projectId,data.amount.value,JBTokens.ETH,,new bytes0 Tools Used Slither Analysis Recommended...

MAL-2023-1383 Malicious code in opencv-keras (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f3dbc8704eb128ec656854e38ccd3c45d1232978eed378bb7711837dddd09bf The OpenSSF Package Analysis project identified 'opencv-keras' @ 17.10.13 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...