CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

CVE-2024-29402

cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity...

Joint Guidance on Deploying AI Systems Securely

Today, the National Security Agency’s Artificial Intelligence Security Center NSA AISC published the joint Cybersecurity Information Sheet Deploying AI Systems Securely in collaboration with CISA, the Federal Bureau of Investigation FBI, the Australian Signals Directorate’s Australian Cyber...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 Compromise Checker A very simple bash script to...

MAL-2024-1254 Malicious code in reqargs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878 The OpenSSF Package Analysis project identified 'reqargs' @ 1.4 pypi as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1203 Malicious code in nespresso-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecb1d1aad101d1cf5bdd8986e77fa20c75f039412cec1ebe03442f8fec9f939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1198 Malicious code in locus-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae618c99394568c62b082d0c55c5da01da065e9ad01343f5737caf05685612b8 The OpenSSF Package Analysis project identified 'locus-website' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1197 Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

Detecting Windows-based Malware Through Better Visibility

Despite a plethora of available security solutions, more and more organizations fall victim to Ransomware and other threats. These continued threats aren't just an inconvenience that hurt businesses and end users - they damage the economy, endanger lives, destroy businesses and put national...

Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities

The Android banking trojan known as Vultur has resurfaced with a suite of new features and improved anti-analysis and detection evasion techniques, enabling its operators to remotely interact with a mobile device and harvest sensitive data. "Vultur has also started masquerading more of its...

MAL-2024-1161 Malicious code in galileo-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1171 Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1170 Malicious code in amcharts-accessibility-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d8c46b66a30d5f77349bdbe5c55b3412346a1b9ee26009a3ee535cdcf1e1677 The OpenSSF Package Analysis project identified 'amcharts-accessibility-plugin' @ 99.3.0 npm as malicious. It is considered malicious because: -...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils ve...

MAL-2024-1184 Malicious code in wm-search-deployables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75117d2388716c2ebc07fc5320bc6b6d5130dc106da865682566ea803272aa8d The OpenSSF Package Analysis project identified 'wm-search-deployables' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1155 Malicious code in createarrayfrommixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5b05e4d5d47ae77d4f4838cadeb6514d14c7b8affae381303aefe4746ea85e3 The OpenSSF Package Analysis project identified 'createarrayfrommixed' @ 1.9.1 npm as malicious. It is considered malicious because: - The packa...

‘Malicious Activity’ Hits the University of Cambridge’s Medical School

Multiple university departments linked to the Clinical School Computing Service have been inaccessible for a month. The university has not revealed the nature of the “malicious activity.”...

MAL-2024-1178 Malicious code in programmablesearchengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e202ed286f9758737c48d4cf1c30f0ece100c6433edd1076e9548baa6a2373d6 The OpenSSF Package Analysis project identified 'programmablesearchengine' @ 99.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1175 Malicious code in mytmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676558f1795470bc642910cfcb649425633481aa4c72864aa4354baa183ee115 The OpenSSF Package Analysis project identified 'mytmobile' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...