SUSE CVE-2022-35164

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bitcopychain...

SUSE CVE-2022-36944

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java object deserialization within an application. In such situations, it allows attackers to erase contents of arbitrary files, make network...

SUSE CVE-2023-0286

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

Veeam PowerShell cmdlets to help Automate Backup Copy Backup Format Upgrade

This article provides information about using Veeam PowerShell to automate the procedure of upgrading Legacy Periodic Backup Copy jobs to use the new True Per-Machine backup format. These PowerShell commands can be used to simplify the Backup Chain Format upgrade process...

UBUNTU-CVE-2023-23916

An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this...

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

Malicious actors have published more than 451 unique Python packages on the official Python Package Index PyPI repository in an attempt to infect developer systems with clipper malware. Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a...

Malicious code in giptython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e4f24f0e607f40d62174910c08aebbf2b13c2c3d4c095e0704bbaa819ce37082 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitptyhon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 45c246067508604b2fc9cc840ff847aff48256114629150276ba40a73c6afff7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toollkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cd4ed78a11c95724967c6161e24facba220d07404deff69a75ce6a5ce9e93015 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressba2r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57ad7eeb7e8290f07b52a1170c9522d6542094ec49d0bedcbff805b83804cdde Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in equests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 28cdcdae3c9144396d5b7f6c9f741bffb25c111e95c270c9d719155b7ce0c581 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toolblt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3ada42ede532621e26d32b1d7c1554f5b33337b73090a7aa0b051f69626cf5da Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in siplejson (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 510010840970c21e64aa4803dced7f75832e88d73a8b54ea11e9d12882fbb254 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websoket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 927f32cb8d7dce3b04539d688c8c5d5917fcfad305a321a7deade069388b410d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Friday Squid Blogging: Squid Is a Blockchain Thingy

I had no idea--until I read this incredibly jargon-filled article: Squid is a cross-chain liquidity and messaging router that swaps across multiple chains and their native DEXs via axlUSDC. So there. As usual, you can also use this squid post to talk about the security stories in the news that I...

Malicious code in pyhton-binance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bb856715857f47e2c3e65e4207042488de6bfb22d3f55ee5762405004eea86a0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in python-binacne (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 242390e4eac66fd15d4807033c99de1645afecae38d3d5c44e051d43c6d41454 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pygmae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b32bd936cba9e54fe9af6584c693a60e6e8b483d18e6837c8692cc4b1ada6855 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sickit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc42e627b9062b3348f41834d79c21ff46756e374c14509eec1b73a8a00dc749 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sccikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5a20e86890083935f6a937a41310e1fd22ca9f00215d56dcca5114cf6c1ddcb7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...