PT-2022-18679 · Automox · Automox Agent For Macos

Name of the Vulnerable Software and Affected Versions: Automox Agent for macOS versions prior to 39 Automox Agent for macOS versions prior to 37 Description: The issue is related to a time-of-check/time-of-use TOCTOU race-condition attack that can occur during the agent install process. It also...

2022-06 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5016139)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

MAL-2022-2899 Malicious code in evil-package-no-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f89aa37906751451562dd49ae34fbf0d01b7e329fcf2f7223c677a5d08c2ec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evil-package-no-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f89aa37906751451562dd49ae34fbf0d01b7e329fcf2f7223c677a5d08c2ec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sncicd-install-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9077b8460d852a9b8afdc2a831fdb0f74e227b48f17f85ddb7ee0da67efa489c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6190 Malicious code in sncicd-install-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9077b8460d852a9b8afdc2a831fdb0f74e227b48f17f85ddb7ee0da67efa489c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-765 Malicious code in @xvideos/install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c707c56640def6b741e8591f6c9bbf394a899f534c0078e37a8328b8da49156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5384 Malicious code in pnpm-local-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e53aa0e5484077b33dca99874f607f08f4996f8d1fa2e9fabc7b21f7aed81265 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pnpm-local-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e53aa0e5484077b33dca99874f607f08f4996f8d1fa2e9fabc7b21f7aed81265 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdcabc89fbe9445cec97807348daae0666fd0917642c57162147d5df81333a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM QRadar Wincollect agent is vulnerable to information disclosure

Summary The IBM QRadar Wincollect standalone agent is vulnerable to sensitive information disclosure due to missing best practices. Vulnerability Details CVEID:CVE-2021-39006 DESCRIPTION: IBM QRadar WinCollect Agent could allow an attacker to obtain sensitive information due to missing best...

Fedora: Security Advisory for kernel (FEDORA-2022-b8b1e358e1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

libdtrace-ctf Required to Install Veeam Agent for Linux on Oracle Linux UEK

Challenge When installing Veeam Agent for Linux on Oracle Linux 6 or 7 with UEK kernel, the veeamsnap package fails to install with the following error: Error! Bad return status for module build on kernel: Consult /var/lib/dkms/veeamsnap//build/make.log for more information. The make.log example...

SUSE-SU-2022:2073-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 bsc1198581 - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap bsc1191184 - CVE-2021-3696: Fixed that a crafted PNG image could lead to...

Vulnerability fixed in Microsoft Edge

A vulnerability has been fixed in Microsoft Edge. A remote malicious person could potentially exploit the vulnerability to execute arbitrary code. Because it is possible to get out of Edge's sandbox environment, execution of code at the SYSTEM level cannot be ruled out. Abuse requires that the...

Siemens SINEMA Remote Connect Server 数据伪造问题漏洞

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunneled connections VPN between headquarters, service technicians, and installed machines or plants.Siemens SINEMA Remote Connect Server is vulnerable to a data authenticity validation error, which could b...

Fedora: Security Advisory for kernel (FEDORA-2022-80cc9873be)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

Fedora: Security Advisory for kernel (FEDORA-2022-ef8c8a5925)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...