New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

Researchers have discovered an inexpensive attack technique that could be leveraged to brute-force fingerprints on smartphones to bypass user authentication and seize control of the devices. The approach, dubbed BrutePrint , bypasses limits put in place to counter failed biometric authentication...

Improper configuration in JBXBuybackDelegate can cause swaps to fail everytime

Lines of code Vulnerability details Impact Improperly configured direction of swap in JBXBuybackDelegate can cause the calls to swap tokens in Uniswap V3 pool to fail everytime. So if the ideal path is token swap over minting, swaps will fail and new project token will be minted instead Proof of...

Malicious code in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f908f4ccc0a28c94802da4ab1792616bfdeb1f1c3f5faf766ee5390fd3f3d189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-love-letter-to-whiskey-by-kandi-steiner-on-iphone-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3543696adf399ee2a47ce791064b54f73b62253d59a299dd04ffd2cb1decae26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pucked-off-pucked-5-by-helena-hunting-on-audiobook-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b979714a561c451bcc357192abbc2aee479ab7c13fc449c8e9364bd1c70aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in origin-robert-langdon-5-by-dan-brown-on-kindle-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d3f3379219c0c91bda649e483a3cb9ddc9ff24363501116063b156bfddcb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Upgraded Q -> 2 from #882 [1683052821779]

Judge has assessed an item in Issue 882 as 2 risk. The relevant finding follows: In function buy and sell if one royalty recipients reverts whole transaction will fail --- The text was updated successfully, but these errors were encountered: All reactions...

Malicious code in dreamteam11-google-tech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fa8233b2417c3495294e1fd0c5a031af4981dfcda1faa893025a52d760089e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-uploadcare-widget-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524e985710633866c8a77431e4ded18aa911c225db74bb40da3457894383be3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SharePoint backup jobs fail with: The remote server returned an error: (429)

After upgrading to Veeam Backup for Microsoft 365 7, backup jobs may fail with this error due to SharePoint Online throttling policy...

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

Malicious code in tdv2-service-profile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315fa33cd2a65d72c64fd2953dad9b87ab8de98e698957135d16b96a8f4ea53f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tdv2-applet-search-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e022c3efe7e835b45fddf0e6d3e78494e10cf44eae43cfdc147cadbe25d7dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mlp-friendship-map-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76abb07078c4e50437fae33f4f845fad2aa8532a9503d2c5ea91f4bf6f9a5bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A New Security Category Addresses Web-borne Threats

In the modern corporate IT environment, which relies on cloud connectivity, global connections and large volumes of data, the browser is now the most important work interface. The browser connects employees to managed resources, devices to the web, and the on-prem environment to the cloud one. Ye...

Malicious code in follow-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc58a7a39a3da5508a2d0e86e8a9b92384514b331afbb923e6d20295b6c0f65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-screen-reader-announce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc94449e1dfbaea67fc7604cd192d90a355930f498364278937ae27e64050540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db779bc3d95749d4bb288d33d42d6febc864b8ab1ce8b51b5ddba5cfac9298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devcenter-internal-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cc2065f221e57c6d1888edceccde992285946892dd890445b2f5cdab3002c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-businesslogic-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0524578c578563fb6702db75acc506cf100762a285f1b536add61f45b4e020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...