Group control for forums - Critical - Access bypass - SA-CONTRIB-2023-008

This module enables you to associate Forums as Group 1.x content and use Group access permissions. Previous versions of the module incorrectly set node access on creation, and did not correctly restrict access to lists of forum topics...

CVE-2022-3162 Unauthorized read of Custom Resources

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

CVE-2022-3162 Unauthorized read of Custom Resources

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

CVE-2022-3162

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

US Marshals Service Hit By Major Ransomware Attack

By Waqas At this moment, it is unclear which group is responsible for the ransomware attack. This is a post from HackRead.com Read the original post: US Marshals Service Hit By Major Ransomware Attack...

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...

Intel® SGX Linux Kernel Drivers Advisory

Summary: A potential security vulnerability in Intel® SGX Linux kernel drivers may allow denial of service. Intel is working with the Linux kernel maintainers to create a mitigation. Vulnerability Details: CVEID: CVE-2021-33135 Description: Uncontrolled resource consumption in the Linux kernel...

TCG TPM2.0 implementations vulnerable to memory corruption

Overview Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module TPM 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access to a TPM-command interface can send maliciously-crafted commands to the module and...

TCG TPM 缓冲区错误漏洞

TCG TPM is a chip from the Trusted Computing Group that is planted inside a computer to provide a trusted root for the computer. A security vulnerability exists in version 2.0 of the TCG TPM that stems from an out-of-bounds write issue. An attacker could use this vulnerability to cause a denial o...

MAL-2023-6610 Malicious code in selfreplacetoolreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5afa2837f01d52ea3608d81ca5f739c43e9b4707e5ff3f8219f51d2c27f3dc03 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6651 Malicious code in selfstrresuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 49803565eb7930c1be012ba3459247ea4b14d432a6e16c4ba5917e4e2f697856 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5518 Malicious code in py-pushpingload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 92d3a1c30172ae30ec5af9afddc967e08214d997da4fc4619ec8ffd9bbd050f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4138 Malicious code in libkilledgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7309d7a56fe3f4d048da7ed2d69ea79e96435d3da3cd52434e2326c8ec184c1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfcvedpep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx faffc37b530acdb4e7a54c9082a078755846487d2a529f9e0aeb965b498666ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7559 Malicious code in tpreplacekillram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 828090e311bc61942cfd9d6434b6291153c7bce1ac7d201632f22ae3339e29c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3552 Malicious code in esqvisastred (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 38da1704b225a9e7e330990b5c052419bf41e5d10da15b756799e741b912d299 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppushvmgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96c8cf2f968b45c647c32d2dc65de5b1550ae52555dfadf4c35151afaefc1d5a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4388 Malicious code in libpullurlcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edab3edc06b209aa1bbec0f7e1fc7ae8f0a03b9b53bbc5d74f1cbd1aec12bf8c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3137 Malicious code in esqnvidiapaypalmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cfc5dfae5c2a0cf884394ec5c67fd0e6974c51bc6a32941045589410690ebbbd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3260 Malicious code in esqpullcraftlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56855a5ba83eb08fd0c7aa4cb319b3460f2ae497bba68814ec35776030a13893 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...