Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI: Endpoint: pci-epf-vntb: Remove duplicate resource teardown The epfntbepcdestroy function duplicates the teardown that the caller is supposed to perform later. This leads to an error when .allowlink fails, or when .droplink i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevents attempts to reclaim poisoned pages TL;DR: In SGX, when pages are reclaimed, their contents are copied to secondary storage. SGX instructions do not properly handle machine checks. Nevertheless, existing SGX code...

Malicious code in epc-primer-ui-tags (npm)

Source: ossf-package-analysis cfb923577e57629ff06e092f23f6da4b29067756b213c6e923154649d8f93aca The OpenSSF Package Analysis project identified 'epc-primer-ui-tags' @ 66.6.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in epc-node-web-client (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in epc-menu-header-poc (npm)

--- Credit: OpenSSF source...

Malicious code in epc-teste-lykos (npm)

--- Credit: OpenSSF source...

Malicious code in epc-help-widget (npm)

The package epc-help-widget was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in epc-ui-tour (npm)

Source: ossf-package-analysis 564b0da0b00f30ef4d3e9c7c03c624fe43365f10b3c1fa049ce0e7148373af4c The OpenSSF Package Analysis project identified 'epc-ui-tour' @ 99.99.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in epc-notification-setting-web (npm)

Source: ossf-package-analysis 7e2f6eb6b2d571a457c452301694f5e1f6da8ff1254c78f6837eaef6af78134e The OpenSSF Package Analysis project identified 'epc-notification-setting-web' @ 66.6.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in epc-staticpages-web (npm)

--- Credit: OpenSSF source...

Malicious code in epc-onboarding-web (npm)

--- Credit: OpenSSF source...

Malicious code in epc-core-error-handling (npm)

--- Credit: OpenSSF source...

CVE-2024-23578

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing CORS policy for this request that allows access from any domain -Wildcard...

CVE-2024-42214

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts...

CVE-2024-23569

HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header...

CVE-2024-23572

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function...

CVE-2024-23574

HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in the system. Use renumeration is when a malicious actor can use brute-force techniques to either guess or confirm valid users in a system...

CVE-2024-23570

HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in an iFrame on his malicious site. The attacker can then launch a Clickjacking attack, which may lead to Phishing, Cross-Site Request Forger...

CVE-2024-23575

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error messages to help launch another ,more focused attack...

CVE-2024-23567

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local...