14407 matches found
MAL-2024-9404 Malicious code in direct_access_theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e064b0aa00efc879c6095cc571b4d1359ef3cd9c13e1f02b5497c78d364fabef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mitsubishi Electric CNC Series (Update D)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Equipment : CNC Series Vulnerability : Improper Validation of Specified Quantity in Input 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated remote...
Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
MAL-2024-9408 Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...
Malicious code in spectrum-css-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd11f8bce16c648d0357bfe32e3f5597413551bc0eb8884eee63ac92eaa9569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nuxtjs_axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc2f94efdf2068b7e7ceb3c7f058d573962b9484300a6d559ff9d7a947f22008 The OpenSSF Package Analysis project identified 'nuxtjsaxios' @ 5.13.6 npm as malicious. It is considered malicious because: - The package...
The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the Substance 3D Stager software relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code on the device while analyzing SKP files...
MAL-2024-9299 Malicious code in tomorrowland (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0815a68270dcf10f382a198392cb5e265233bc6fd6f8bd3fdaff345b87ce8e11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9297 Malicious code in viajemos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eaa4f7f65afd8ce40ebdcb66c5d40f5a10adf26157fb493c4628b2c5940d843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9288 Malicious code in blank-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9284 Malicious code in timeline-airtable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9283 Malicious code in mmpp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e1d61143b91e405fc0bf1401f3def53b01efefc28bfed53a58995d4dd41153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @client-innovation/librct (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...
MAL-2024-9290 Malicious code in @client-innovation/librct (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...
What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?
Probably once a week, I see posts like this in the r/Ubiquiti subreddit. Ubiquiti makes network gear that includes an "IDS/IPS" feature. I own some older Ubiquiti gear so I am familiar with the product. When you enable this feature, you get alerts like this one, posted by a Redditor: This is...
Akamai’s Perspective on October’s Patch Tuesday 2024
...
OSV-2024-1200 UNKNOWN READ in eat_line
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515100 Crash type: UNKNOWN READ Crash state: eatline extractfield parsesdpsession...
Malicious code in @copilot-web-widgets/ai-writer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 370d6b958dcc6a556f2ee4be3946c6a1a995bb05d4217f408f2302dd397689a2 The OpenSSF Package Analysis project identified '@copilot-web-widgets/ai-writer' @ 1.13.1 npm as malicious. It is considered malicious because: ...
MAL-2024-9212 Malicious code in @copilot-web-widgets/common-core-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 npm as malicious. It is considered malicious...
