MAL-2023-1212 Malicious code in innotecsaludo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0835a79941b28db8905c92debfa5937bc9bb5707163402d7b82630d5f35fd14 The OpenSSF Package Analysis project identified 'innotecsaludo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Rockwell Automation ThinManager

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ThinManager Vulnerabilities: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to decrypt traffic...

MAL-2023-1190 Malicious code in gql2ts-from-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a1acee750c796d45e602f027ea638a05590a78bb142aca903bfb2bb169466a6 The OpenSSF Package Analysis project identified 'gql2ts-from-schema' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in adityan-pwdd-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 674ca0f770a4ea3dd88fa7978e7f082c0baa7b7eaa7f761e364d1c8bccfc3664 The OpenSSF Package Analysis project identified 'adityan-pwdd-test' @ 3.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1110 Malicious code in adityan-pwdd-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 674ca0f770a4ea3dd88fa7978e7f082c0baa7b7eaa7f761e364d1c8bccfc3664 The OpenSSF Package Analysis project identified 'adityan-pwdd-test' @ 3.0.8 npm as malicious. It is considered malicious because: - The package...

Trucking on with DotDumper

Trucking on with DotDumper By Max Kersten · May 11, 2023 On the 11th of August 2022, the initial public version of DotDumper was released. A brief refresh: DotDumper is an open-source automatic unpacker for DotNet Framework targeting files. This blog marks a public update which supports unmanaged...

Malicious code in dc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1150 Malicious code in dc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8689cb64586338ac8b83b329558cc7ebd7302602c033a5de1827e1ff8ceaf6e The OpenSSF Package Analysis project identified 'dc-icons' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Denial of Service in Apache Commons used by WebSphere Application Server affect IBM Operations Analytics - Log Analysis (CVE-2023-24998)

Summary There is a vulnerability in the Apache Commons FileUpload library used by IBM WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request...

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API

...

MAL-2023-1410 Malicious code in spammingsynonym (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97a0609c600ca9bc940340f2595fb41607b5af5c3931f10350bea6aa3c9879ae The OpenSSF Package Analysis project identified 'spammingsynonym' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1409 Malicious code in smsobfuscate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa2efc28ecdebc90e41edd50503e199984f68d05cb13edab8b6e8d503d18e75c The OpenSSF Package Analysis project identified 'smsobfuscate' @ 1.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1369 Malicious code in iiris-new2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f584cfefbd98e630ed7a59b892d50d96387e5941f2a09a3543324b1c418396 The OpenSSF Package Analysis project identified 'iiris-new2' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1309 Malicious code in stripe-deep-dup-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29790a4dda8ea513434302f82a02b4ef9cb90fa0b9e63de804082d284c8cb989 The OpenSSF Package Analysis project identified 'stripe-deep-dup-tree' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1308 Malicious code in stripe-deep-deep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in stripe-deep-deep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7158c510e35fd6474a199140be8247cbefc73f5020d7a443927d22a7b555573 The OpenSSF Package Analysis project identified 'stripe-deep-deep' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Intel Trace Analyzer And Collector 缓冲区错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. A security vulnerability exists in Intel Trace Analyzer And Collector versions prior to 2021.8.0 that stems from the presence of a stack-based buffer...

Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...