SUSE: Security Advisory (SUSE-SU-2024:3647-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-9394 Malicious code in t8h4q4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dbe79e5d26237868bbe10b1bad785c327bc37683dd390e1377756f5d1e7b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9354 Malicious code in down-lo-ad-now-zip-mp3-61269-billy-mann-9mfek-wlvmjv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1e91485877216aa978237d462f08009f418e00a915794963346cc39cb14f264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9350 Malicious code in do-wnload-available-67250-from-gardens-where-we-feel-secure-1-zuhte-cbguim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c3c1317e100639f80a2fa6bf8ef45f57844ec4d66cb968b6f04306fed84ebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9407 Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0e410a6e975b8a7d6930f2fbde2be25a08fd2bc8995fc57d1794fc12eaf1e019 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker...

CVE-2024-45796

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This iss...

CVE-2024-45795

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service...

CVE-2024-45796

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This iss...

CVE-2024-45796

CVE-2024-45796 affects Suricata, a network IDS/IPS/NSM engine. The issue is a logic error during fragment reassembly that can cause failed reassembly for valid traffic when processing certain fragments. This vulnerability is addressed in Suricata version 7.0.7; upgrading to 7.0.7 or later mitigat...

CVE-2024-45795 Suricata detect/datasets: reachable assertion with unimplemented rule option

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service...

CVE-2024-45795

Suricata (IDS/IPS/NSM) prior to 7.0.7 is vulnerable to an assertion during traffic parsing when rules use datasets with the non-functional/unimplemented “unset” option, potentially enabling denial-of-service. The issue is addressed in version 7.0.7; recommended mitigations include updating to 7.0...

CVE-2024-45795 Suricata detect/datasets: reachable assertion with unimplemented rule option

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service...

CVE-2024-45844

creationtimestamp| type| source ---|---|--- 2024-10-16 18:03:48+00:00| seen| https://t.me/cvedetector/8089 2024-10-18 12:32:56+00:00| seen| None 2024-10-30 09:07:43+00:00| seen| MISP/0b830b9f-a6c9-4a20-90c1-81aba360c517 2024-10-31 12:27:03+00:00| published-proof-of-concept|...

MAL-2024-9684 Malicious code in laweuf (npm)

--- -= Per source details. Do not edit below this line.=-...

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit...

BEC-ware the phish (part 1). Investigating incidents in M365

TL;DR Review the key artefacts to ensure the best possible telemetry is available in the case of a Business Email Compromise BEC. Keep an eye on data retention, where necessary export or forward data for investigations longer than 30 days. Verify and enable Unified Audit Logging, its free and giv...

CVE-2024-6519

creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1382/ 2024-10-21 17:41:25+00:00| seen| https://t.me/cvedetector/8500 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-48782

CVE-2024-48782 : Affected software is DYCMS Open-Source Version v2.0.9.41. The vulnerability is a file-upload flaw where the frontend only checks the file extension, enabling a remote attacker to execute arbitrary code. Impact is high (remote code execution) as described in connected sources. Som...

Ta Da! The Wiz Runtime Sensor is now available in Wiz for Gov (FedRAMP)

We are excited to announce the addition of the Wiz Sensor to Wiz for Gov’s ATO. The lightweight eBPF based sensor improves risk prioritization, deepens threat detection, and adds runtime protection for container hosts and VMs...