MAL-2023-8472 Malicious code in data-type-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90c26075e74ebc9cae6a492f997974105a4951be23a89236c7e84a0a9e169933 The OpenSSF Package Analysis project identified 'data-type-public' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8468 Malicious code in vanillajs-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19dd1596da1181577937a6d843a7fe1b41a9bb73029d7ecbd4c33e406ad73062 The OpenSSF Package Analysis project identified 'vanillajs-test' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8442 Malicious code in tst-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2033e787504d86b9c1f6d2daf7a33c85b76d469c02750192e284c092fd69059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel

Google is warning of multiple threat actors sharing a public proof-of-concept PoC exploit that leverages its Calendar service to host command-and-control C2 infrastructure. The tool, called Google Calendar RAT GCR, employs Google Calendar Events for C2 using a Gmail account. It was first publishe...

Malicious code in ch-frontend-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in onsurity-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f08d8e742760f69f6a097c7eae74d85b4135241f48e47d2ee27f867e319550a5 The OpenSSF Package Analysis project identified 'onsurity-onboarding' @ 0.1.0 npm as malicious. It is considered malicious because: - The packag...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit...

48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

A new set of 48 malicious npm packages have been discovered in the npm repository with capabilities to deploy a reverse shell on compromised systems. "These packages, deceptively named to appear legitimate, contained obfuscated JavaScript designed to initiate a reverse shell on package install,"...

MAL-2023-8423 Malicious code in @olxui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a653affd18c77f72727a33c59b7baebb39d3a38ecec4a894d1eff832cbc0501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: insights-client security update

An update for insights-client is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

TrafficWatch - TrafficWatch, A Packet Sniffer Tool, Allows You To Monitor And Analyze Network Traffic From PCAP Files

TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files. It provides insights into various network protocols and can help with network troubleshooting, security analysis, and more. Protocol-specific packet analysis for ARP, ICMP, TCP, UDP, DNS, DHCP,...

Important: Red Hat Security Advisory: insights-client security update

An update for insights-client is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a...

Franklin Fueling System TS-550

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Franklin Fueling System Equipment : TS-550 Vulnerability : Use of Password Hash with Insufficient Computational Effort 2. RISK EVALUATION Successful...

Red Lion Crimson

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Red Lion Equipment : FlexEdge Gateway, DA50A, DA70A running Crimson Vulnerability : Improper Neutralization of Null Byte or NUL Character 2. RISK EVALUATION Successful exploitation of this...

F5 Networks BIG-IP : RSRE Variant 3a vulnerability (K51801290)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K51801290 advisory. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may...

F5 Networks BIG-IP : SSB Variant 4 vulnerability (K29146534)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K29146534 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the...

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604

Tom Elkins, John Fenninger, Evan McCann, Matthew Smith, and Micah Young contributed attacker behavior insights to this blog. Beginning Friday, October 27, Rapid7 Managed Detection and Response MDR identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two different customer...

MAL-2023-8426 Malicious code in discordstreams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ecd29a8cad2b5a03c4966ae6e4e1f9879d9a26bcf5b48b620074ac2e65d197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection

The Russia-linked hacking crew known as Turla has been observed using an updated version of a known second-stage backdoor referred to as Kazuar. The new findings come from Palo Alto Networks Unit 42, which is tracking the adversary under its constellation-themed moniker Pensive Ursa. "As the code...

MAL-2023-8413 Malicious code in xterm-addon-unicode-graphemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e517091262ed409fb53011792754e279673a300f5e9abf2377eec73ed814f9c The OpenSSF Package Analysis project identified 'xterm-addon-unicode-graphemes' @ 6.0.6 npm as malicious. It is considered malicious because: -...