Malicious Package

Overview aem-guides-wknd-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview bytes-guides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview byte-guides is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

heap-mastery-course

Heap Mastery Course Learn heap vulnerability exploitation t...

SoK: Systematizing a Decade of Architectural RowHammer Defenses through the Lens of Streaming Algorithms

A decade after its academic introduction, RowHammer RH remains a moving target that continues to challenge both the industry and academia. With its potential to serve as a critical attack vector, the ever-decreasing RH threshold now threatens DRAM process technology scaling, with a superlinearly...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE COLLECTION 📊 Comple...

EUVD-2018-3040

Malware in sbrugna...

Microsoft Teams 安全漏洞

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting the vulnerability could execute code. The following products and versions are affected:Teams for D365 Remote Assis...

Interpreting Differential Privacy in Terms of Disclosure Risk

As the use of differential privacy DP becomes widespread, the development of effective tools for reasoning about the privacy guarantee becomes increasingly critical. In pursuit of this goal, we demonstrate novel relationships between DP and measures of statistical disclosure risk. We suggest how...

Malicious code in chia-dev-guides (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 346392e0fae6d3a254175cbf00c6b2ebbac781151d1eb9fe24079457e807b317 The OpenSSF Package Analysis project identified 'chia-dev-guides' @...

MAL-2025-5644 Malicious code in chia-dev-guides (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 346392e0fae6d3a254175cbf00c6b2ebbac781151d1eb9fe24079457e807b317 The OpenSSF Package Analysis project identified 'chia-dev-guides' @...

Security Bulletin: IBM Storage Ceph is vulnerable to Injection in the RHEL UBI (CVE-2023-6004)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-6004 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-6004 DESCRIPTION: libssh could allow a local authenticated attacker to execute...

This Week in Spring - February 11th, 2025

Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...

Malicious code in aem-guides-wknd-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-11318 Malicious code in byted-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in byted-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in byte-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11316 Malicious code in byte-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

org.keycloak:keycloak-guides (>=15.1.0 <=15.1.1), org.keycloak:keycloak-guides-maven-plugin (>=15.1.0 <=15.1.1) +3 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=15.0.0 <=15.1.1)

org.keycloak:keycloak-quarkus-server MAVEN version =15.0.0, =15.1.0, =15.1.0, =15.1.0, =15.0.0, =15.0.0, =15.1.1 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0 <=2.7.4-24.0), org.keycloak:keycloak-guides (>=24.0.0 <=24.0.5) +4 more potentially affected by CVE-2024-9666 via org.keycloak:keycloak-quarkus-server (>=24.0.0 <=24.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version =24.0.0, =2.5.6-24.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.0, =24.0.5 Source cves: CVE-2024-9666 Source advisory: OSV:GHSA-JGWC-JH89-RPGQ...