Security Bulletin: IBM Security Verify Information Queue web-app container is vulnerable to denial of service attack (CVE-2022-35283)

Summary The web-app container in IBM Security Verify Information Queue ISIQ v10.0.2 can be shut down with a malformed HTTP request. ISIQ v10.0.3 has implemented stricter URL validation to prevent this type of denial of service attack. CVE-2022-35283 Vulnerability Details CVEID:CVE-2022-35283...

Dell BSAFE Crypto-C Micro Edition and Dell BSAFE Micro Edition Suite Security Feature Issue Vulnerability (CNVD-2022-84616)

Dell BSAFE Micro Edition Suite is a development kit that provides encryption, certificate and transport layer security for c/c applications, devices, systems, etc. Dell BSAFE is a security software product that supports encryption algorithms, certificate chain authentication and transport layer...

CVE-2022-33704

Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...

SUSE: Security Advisory (SUSE-SU-2022:2312-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Scripting component of the Java Runtime Environment and the Java Development Kit, which allows attackers to influence the integrity, accessibility, and confidentiality of protected information.

The vulnerability of the Scripting component of the Java Runtime Environment and the Java Development Kit application development tools is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to influence the integrity, accessibility, and...

Malicious Package

Overview acronis-ui-kit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by one of...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022. The switch in modus operandi, spotted by Romanian company Bitdefender, comes in the wake of Raccoon Stealer temporarily...

Security vulnerabilities: 5 times that organizations got hacked

Businesses and governments these days are relying on dozens of different Software-as-a-Service SaaS applications to run their operations — and it’s no secret that hackers are always looking for security vulnerabilities in them to exploit. According to research by BetterCloud, the average company...

Debian DLA-3054-1 : sleuthkit - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory. - In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as...

Malicious code in training-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c30cfeb02ace6f2a9aa967e0649b533a422045eb20037daa73631978ef37df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6633 Malicious code in training-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c30cfeb02ace6f2a9aa967e0649b533a422045eb20037daa73631978ef37df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efecba8dcb48228aa3ab222a2aa87760bcf8c9b06c25fe1fc2193dd8964141a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-596 Malicious code in @snapp/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2dc9ffa10b695b64ee6246153f2c84c9e815d1ed6fd6d0f3c401457fb02a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @snapp/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2dc9ffa10b695b64ee6246153f2c84c9e815d1ed6fd6d0f3c401457fb02a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cutoffurmind-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef61a01ca0e61991b1fdbf89d955ed7c02e9482fb0d6f980fbaeffbf4e809b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2289 Malicious code in cutoffurmind-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef61a01ca0e61991b1fdbf89d955ed7c02e9482fb0d6f980fbaeffbf4e809b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e82d1c530731419cac7916aa1d029e236fcebde8ca18509bda12493d281970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superapp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8661287acb0d1449413e363c682ab1d8cc1815d42b6c36e957f78dfeb8d4e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...