Code injection

In Zscaler Internet Access ZIA a mismatch between Connect Host and Client Hello's Server Name Indication SNI enables attackers to evade network security controls by hiding their communications within legitimate traffic...

MAL-2024-948 Malicious code in identity-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

Simple Yet Vital Tips to Send Documents Securely via Email

By Uzair Amir In the information age where knowledge equals money, securing business communications, especially through e-mails, is critical and very… This is a post from HackRead.com Read the original post: Simple Yet Vital Tips to Send Documents Securely via Email...

Weak TLS Encryption

MeshCentral is vulnerable to TLS Downgrade Attack. The vulnerability is due to the usage of TLS that includes known vulnerabilities. An attacker can possibly eavesdrop on communication as result of this vulnerability...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome WebRTC module, which stems from a confusion in the instructions responsible for freeing memory in the WebRTC module. An attacker can exploit this vulnerability to execu...

Cybersecurity Must De-Risk the Business

The Catalyst for My Return to Qualys “Necessity is the mother of all invention.” – Plato Introduction Cybersecurity as a problem and practice is evolving. This evolution is driven by business risk. Does this sound obvious? For far too long, we in security have put the technology cart way ahead of...

MAL-2024-921 Malicious code in npm_package_dependencies_promise_polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 812a88e649d4ae3319f178ec2ba4be3b92660d1887021d1525e1c46baa5618f6 The OpenSSF Package Analysis project identified 'npmpackagedependenciespromisepolyfill' @ 8.3.0 npm as malicious. It is considered malicious...

Malicious code in yoga-layout-bf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9b59bfda9900fe733c84e49fb2751b2e66ecd904895deedb4b591f80be5685d The OpenSSF Package Analysis project identified 'yoga-layout-bf' @ 2.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-951 Malicious code in discord-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6192027c3576f1efb2bbd06fa525cab0ca4115483f0e8df0a0d2c93f60b24a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6192027c3576f1efb2bbd06fa525cab0ca4115483f0e8df0a0d2c93f60b24a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-925 Malicious code in browser-spoof (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 163b0aa2d0d3439a25800f6f383fbe268a69753591f918b10475d357d4e4a533 The OpenSSF Package Analysis project identified 'browser-spoof' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Chatbots and Human Conversation

For most of history, communicating with a computer has not been like communicating with a person. In their earliest years, computers required carefully constructed instructions, delivered through punch cards; then came a command-line interface, followed by menus and options and text boxes. If you...

Malicious code in uui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20e448a4d82eef5d5f76dd3f8c325358b3b2df9e1d124b28a4a2843f466cb94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...

SUSE CVE-2023-46343

In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c...

Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

GHSA-7G9J-G5JG-3VV3 Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

DEBIAN-CVE-2023-46343

In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c...

[SECURITY] Fedora 38 Update: openssh-9.0p1-18.fc38

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

CVE-2023-46892

CVE-2023-46892 concerns the Meross MSH30Q (version 4.5.23) RF communication protocol. The issue is a replay attack vulnerability that allows recording and replay of previously captured RF commands to trigger unauthorized actions (e.g., thermostat temperature). Affected component is the device’s R...