OESA-2023-1636 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption...

MAL-2023-8106 Malicious code in paypal-validators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebc6b081257d4c572b2609876f97c2068316a5023ba3ed2acc567fbca9e0f2eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PCI v4 is coming. Are you ready?

If you’ve landed here the chances are you are considering PCI compliance. At present the scheme is running against v3.2.1. In March 2022, the PCI Council released the long-anticipated v4.0. The Council stated that the changes represent their determination to “continue to meet the security needs o...

MAL-2023-8089 Malicious code in antdesignpro2021 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2743e3748612ab32fe4aaa84ec3ee0b4a6f6063b07bdf9afa1bad50ade1d6ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8073 Malicious code in limitd-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaca8a4172555e8b77c7a19d6596b6f56a357374861835e8f805915783a482e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8069 Malicious code in cxday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337ddbb53f9f6b87096ad49167380b2190f06b80c03e8d904f742a33e71b6596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-4015

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can lead unbinding the chain and objects be deactivate...

CVE-2023-4015 Use-after-free in Linux kernel's netfilter: nf_tables component

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can lead unbinding the chain and objects be deactivate...

MAL-2023-8058 Malicious code in @ks-radar/radar-event-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce11383a1d9efca79de168a03a8a27792a475fdc6ef35eaf6500d76bfc2d3f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8056 Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-17671 · Unknown · Imgsys Cmdq

Name of the Vulnerable Software and Affected Versions: imgsys cmdq affected versions not specified Description: The issue is related to a possible out of bounds read in imgsys cmdq due to missing valid range checking. This could lead to local denial of service and requires System execution...

MAL-2023-7987 Malicious code in master-oracle-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5d683c33e479ccc6ca6bb739fae7fc1a6d64781f08d95866becdfdd08e26fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8044 Malicious code in course-structure-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba461beb0cfa134b32939e390986f7241728578f0f54afa6b2866bd4d371af26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7983 Malicious code in emon78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f0edc650da505afa8dc8f6771ea545e69d9082314fd142e36e647658943fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7976 Malicious code in mmolecule-sqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654ba1959dfad5138ab1369e96408297313846c67baf5dcabbbc055c4ed263a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7971 Malicious code in mmolecule-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6a1f18648beba2a8938064ff1661d516c95d8940377de4bcd2f938360b9588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7947 Malicious code in @bt-lotus-cicd/eslint-config-lotus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d77f679c79d9699e68511d896addd3fddc773bc3f89c4a8f38c6f763f68a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7950 Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7954 Malicious code in fca-kurumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34a04eec5590156606a28566b27002d781eae50ebfe2c0c27b1256db1431082d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...