Malicious code in woodpecker-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff5749234f2b25995b0c9e8c5b6baa0434340fe0646aa21e19eef1e6612812a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-sns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dde2984debaba750af691ea1ba70116984fba098ecf0fe26a0fdf576d386f53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of...

kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()

A vulnerability was found in the eventdeliver function in the Linux kernel's VMCI component, where the issue involves a lack of sanitization for the eventdata.event index controlled by user-space, which could lead to speculative information leaks...

Malicious code in alifx-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8716d89d3543726f75604dccfd9a5ab777f48047bb3aa028cdc047c77d1b9dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: python-virtualenv security update

An update for python-virtualenv is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Malicious code in openai-realtime-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA and EPA Release Joint Fact Sheet Detailing Risks Internet-Exposed HMIs Pose to WWS Sector

Today, CISA and the Environmental Protection Agency EPA released Internet-Exposed HMIs Pose Cybersecurity Risks to Water and Wastewater Systems. This joint fact sheet provides Water and Wastewater Systems WWS facilities with recommendations for limiting the exposure of Human Machine Interfaces HM...

Virtuozzo Hybrid Server 7.5 Update 7 Hotfix 1 (7.5.7-151)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 7 provides new features, as well as stability and usability bug fixes. Vulnerability id: PSBM-159866 Fixed an issue with the 'c2v-convert' tool failing while creating a filesystem for a virtual machine's disk. Vulnerability id: PSBM-159824 The...

SAMR Account Management

Add, lookup and delete user / machine accounts via MS-SAMR. By default standard active directory users can add up to 10 new computers to the domain MachineAccountQuota. Administrative privileges however are required to delete the created accounts, or to create/delete user accounts. Module Options...

Malicious code in lfs-au-website-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

KLA78026 ACE vulnerability in Microsoft Developer Tools

A remote code vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-49063 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-49063 high Solution Install necessary updates fro...

Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rapid7 Extends Cloud Security Capabilities with Updates to Exposure Command

The cloud has become the backbone of modern innovation, powering everything from AI to remote work. But as organizations embrace the cloud, they also face an ever-expanding and increasingly complex attack surface. With purpose-built harvesting technology providing real-time visibility into...

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning ML tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for code execution. The vulnerabilities, discovered by JFrog, are part of a broader collection of 22...

OESA-2024-2522 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actual...

CVE-2024-11149

In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...

Qualys TotalAI: The Journey from LLM Scanner to Comprehensive AI Security Solution

Embarking on the AI/ML Journey The launch of Qualys TotalAI marks a significant milestone in our journey with AI/ML. It all began in March 2024 when we ventured into the rapidly evolving AI/ML landscape and the emerging LLM ecosystem. Recognizing the potential of these technologies to revolutioni...

CVE-2024-51544

Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

PT-2024-9240

Name of the Vulnerable Software and Affected Versions: ABB ASPECT Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to errors in system settings or configuration, allowing a remote attacker to gain unauthorized access to...