MAL-2024-9058 Malicious code in cloudflare-docs-starlight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc416353baa88972c0106ceb1b2fa7077b9cfbcd687be15e44c70ee5edc0c526 The OpenSSF Package Analysis project identified 'cloudflare-docs-starlight' @ 1.1.1 npm as malicious. It is considered malicious because: - The...

CVE-2024-47608

Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from shell injections. This vulnerability is fixed in 2.3.2...

CVE-2024-47608

CVE-2024-47608 applies to Logicytics, a data-harvesting/forensic-analysis tool. Connected sources confirm a shell/OS command injection vulnerability in versions prior to 2.3.2, with the root cause being shell injection points that could allow arbitrary command execution on compromised devices. Th...

Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9065 Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

Optigo Networks ONS-S8 - Spectra Aggregation Switch

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Optigo Networks Equipment: ONS-S8 - Spectra Aggregation Switch Vulnerabilities: Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion', Weak...

Synology DiskStation Manager Observable Discrepancy (CVE-2017-5753)

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...

Logicytics 操作系统命令注入漏洞

Logicytics is a tool from Shahm Najeeb's personal developer. Designed to carefully gather and collect large amounts of Windows system data for forensic analysis. Logicytics 2.3.1 and earlier versions suffer from an operating system command injection vulnerability that stems from the presence of a...

RLSA-2024:6848 Important: pcp security update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fixes: pcp:...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for lld, compiler-rt, module.lld, lldb, python-lit, module.python-lit, module.lldb, llvm, libomp, module.compiler-rt, clang, module.libomp, module.llvm, module.clang. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

RLSA-2024:6837 Important: pcp security update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Security Fixes: pcp:...

MAL-2024-9045 Malicious code in evolve-base-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909d9bfde96cc057e1103d65d9b672ee44b67faf28bb4f4fb8fcbfd7877903d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1baf872685dd4243ab821d1f37c342f5af09558faf5e9bc83e1fd16505802029 The OpenSSF Package Analysis project identified 'hakka' @ 2.1.2 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in dx-hotels-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

EN Is a Proof of Concept PoC script to check for vulnerabil...

MAL-2024-9038 Malicious code in @plentyofcode/header-bidding-adslot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af5eb7081dde9d70a0712995098c35c53b72258056714c3dbefd6a3d194d6ed3 The OpenSSF Package Analysis project identified '@plentyofcode/header-bidding-adslot' @ 2.0.36 npm as malicious. It is considered malicious...

MAL-2024-9037 Malicious code in espace-membre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b15612a701319c442ed796295c30f8613359c1e11fad94655184bdf089bbc9c The OpenSSF Package Analysis project identified 'espace-membre' @ 0.3.3 npm as malicious. It is considered malicious because: - The package...