Exploit for Code Injection in Mjml Mjml_App

MJML Local Code Execution PoC A Proof-Of-Concept for CVE-2024...

Secrets Exposed: Why Your CISO Should Worry About Slack

In the digital realm, secrets API keys, private keys, username and password combos, etc. are the keys to the kingdom. But what if those keys were accidentally left out in the open in the very tools we use to collaborate every day? A Single Secret Can Wreak Havoc Imagine this: It's a typical Tuesd...

BELL-CVE-2023-52909

Bulletin has no description...

Malicious code in opengrep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8de001a262d51e9750f84bfa2f6d30f5798aca9d0614b5feb95215ed1ced0507 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PT-2024-40939 · Crates.Io · Cggmp21

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns challenge derivation in non-interactive Zero-Knowledge ZK proofs, which was ambiguous and could potentially lead to a security issue. However, it is unknown if this...

"ASM_DEP_SHARED" property is wrongly set to true when DEP shared mode is disabled

In XMS 10.15 RP6, the device property "ASMDEPSHARED" is set to "true" even if the "Shared mode" setting of your DEP account is disabled. New DEP enrollments in other 10.15 rolling patches are not impacted...

GO-2024-2978 Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc

If applications print or log a context containing gRPC metadata, the output will contain all the metadata, which may include private information. This represents a potential PII concern...

GHSA-XR7Q-JX4M-X55M Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go

Impact This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information. Patches The issue first appeared in 1.64.0 and is patched in 1.64.1 and...

Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go

Impact This issue represents a potential PII concern. If applications were printing or logging a context containing gRPC metadata, the affected versions will contain all the metadata, which may include private information. Patches The issue first appeared in 1.64.0 and is patched in 1.64.1 and...

Malicious code in rbi-central (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6412 Malicious code in active-model_serializers-hash_wrapper (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in testepassword-generate (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in syscolouringsextv1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Anotar.Sеrilоg.Fody (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in github-runner-lambda-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cash-app-money-generator-new-updated-2023-wosk-xcqk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1565 Malicious code in aws-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b192498364ed7190f44f00a98983087f969407bd217eadfed1c6353335eda7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-28134 PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series

An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...

New Attack Against Self-Driving Car AI

This is another attack that convinces the AI to ignore road signs: Due to the way CMOS cameras operate, rapidly changing light from fast flashing diodes can be used to vary the color. For example, the shade of red on a stop sign could look different on each line depending on the time between the...

MAL-2024-1346 Malicious code in jhsdfgghsdfjhds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cdbadc3c6de57d6cd2d2cb0a8aa99320ed82d13978c3a2667183e8c04f416a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...