MAL-2023-831 Malicious code in taxi-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9208a01f674d2b8b5f755ebf94aacd6c957f9dc6718f2d801e852745c6cdc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unauthorized Access Vulnerability in Beixingyuan Network Breach Monitoring and Alerting Platform

Beijing Beixinyuan Software Co., Ltd. is a comprehensive solution provider committed to becoming a smart security provider in the 5G era. There is an unauthorized access vulnerability in Beixinyuan's network violation monitoring and alerting platform, which can be exploited by attackers to obtain...

File Upload Vulnerability in Dahua DSS In-Vehicle Surveillance Platform

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the Dahua DSS in-vehicle surveillance platform, which can be exploited by an attacker to upload arbitrary files...

Open redirect

Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily choose the originalUrl parameter by editing the query, thanks to a web proxy. When another user opens the URL of the snapshot, they will be...

CVE-2022-23552 Grafana stored XSS in FileUploader component

Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16, 9.2.10, and 9.3.4, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible because SVG files weren't properly...

Pandora FMS 路径遍历漏洞

PandoraFMS is an application from pandorafms USA. It provides a monitoring feature. A security vulnerability exists in Pandora FMS version v764, which stems from the presence of a path traversal that leads to the inclusion of a local file, which could be exploited by an attacker to cause remote...

Beyond CWV: 11 More Performance Metrics to Monitor, Part 3 of 5

Learn the differences between synthetic tests and real user monitoring, and discover 11 web performance metrics beyond the Core Web Vitals — and how to use them...

Protecting Against Malicious Use of Remote Monitoring and Management Software

Summary The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, and Multi-State Information Sharing and Analysis Center MS-ISAC hereafter referred to as the “authoring organizations” are releasing this joint Cybersecurity Advisory CSA to warn network defenders abo...

U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software

At least two federal agencies in the U.S. fell victim to a "widespread cyber campaign" that involved the use of legitimate remote monitoring and management RMM software to perpetuate a phishing scam. "Specifically, cyber criminal actors sent phishing emails that led to the download of legitimate...

U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software

At least two federal agencies in the U.S. fell victim to a "widespread cyber campaign" that involved the use of legitimate remote monitoring and management RMM software to perpetuate a phishing scam. "Specifically, cyber criminal actors sent phishing emails that led to the download of legitimate...

CISA, NSA, and MS-ISAC Release Advisory on the Malicious Use of RMM Software

Today, the Cybersecurity and Infrastructure Security Agency CISA, the National Security Agency NSA, and the Multi-State Information Sharing and Analysis Center MS-ISAC released joint Cybersecurity Advisory CSA Protecting Against Malicious Use of Remote Monitoring and Management Software. The...

SaaS Security Posture Management (SSPM) as a Layer in Your Identity Fabric

The move to SaaS and other cloud tools has put an emphasis on Identity & Access Management IAM. After all, user identity is one of the only barriers standing between sensitive corporate data and any unauthorized access. The tools used to define IAM make up its identity fabric. The stronger the...

Healthchecks 信息泄露漏洞

SIA Monkey See Monkey Do Healthchecks is a cron job monitoring service from SIA Monkey See Monkey Do. An information disclosure vulnerability exists in versions prior to Healthchecks v2.6, which stems from the exposure of sensitive information to unauthorized participants...

CVE-2023-20038

A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the...

Design/Logic Flaw

A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the...

openSUSE 15: dracut-saltboot / golang-github-boynux-squid_exporter / etc (SUSE-SU-2022:4437-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4437-1 advisory. dracut-saltboot: - Update to version 0.1.1665997480.587fa10 Add dependencies on xz and gzip to support compressed images...

Introducing Proactive API Leak Management

Read the press release announcing the early release of Wallarm API Leak Management The recent surge in hacks involving leaked API Keys and other API secrets such as credentials, passwords, certificates, tokens and encryption keys has put everyone involved on notice – organizations need a way to...

CVE-2023-20038

A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the...

CVE-2023-20038

CVE-2023-20038 affects Cisco Industrial Network Director (IND). The issue is a static secret key used to encrypt application data and remote credentials, stored in the monitoring application. An authenticated, local attacker with access to the host could decrypt data to access remote systems moni...

Memory Corruption

linux is vulnerable to Memory Corruption. The vulnerability exists in drivers/usb/mon/monbin.c in usbmon which allows a user-space client to corrupt the monitor's internal memory...