Malicious code in synology-cft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8d0a13d9faee23cc5fc3a8ad9842e1ac0678ba3fd10d0bd453006cb82a88a7 The OpenSSF Package Analysis project identified 'synology-cft' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-90 Malicious code in synology-cft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8d0a13d9faee23cc5fc3a8ad9842e1ac0678ba3fd10d0bd453006cb82a88a7 The OpenSSF Package Analysis project identified 'synology-cft' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

U.S. Treasury Sanctions Russian Money Launderer in Cybercrime Crackdown

The U.S. Department of the Treasury imposed sanctions against a 37-year-old Russian woman for taking part in the laundering of virtual currency for the country's elites and cybercriminal crews, including the Ryuk ransomware group. Ekaterina Zhdanova, per the department, is said to have facilitate...

Insecure minimum threshold in _rotateSigners function

Lines of code Vulnerability details Impact Insecure minimum threshold in rotateSigners function can cause execution of malicious multisig proposals with unexpected results. Proof of Concept The rotateSigners is the only function which can initialize multisig parameters. This function has zero che...

cft-motors.de Cross Site Scripting vulnerability OBB-2707139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...