TRST-M-8 from previous audit still present

Lines of code Vulnerability details Proof of Concept TRST-M-8 from previous audit describes the fact, that when repaying is paused, then pool still continue accruing interests. Usually this is not considered as a medium bug anymore. However, protocol team has stated, that they have fixed...

Malicious code in allianz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acefcd666d8be4ff038f0b8b5999c4f2921bc275a04c9480e3cfcc95a190fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paalni (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80fe310fa14b18a156e781ff55555ecf5c96db6a03102615f4a93d8e961db75a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Douglas-042 - Powershell Script To Help Speed ​​Up Threat Hunting Incident Response Processes

DOUGLAS-042 stands as an ingenious embodiment of a PowerShell script meticulously designed to expedite the triage process and facilitate the meticulous collection of crucial evidence derived from both forensic artifacts and the ephemeral landscape of volatile data. Its fundamental mission revolve...

PT-2024-14633 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically with the f2fs file system. It needs to add a missing gcing flag on page during block migration to guarantee migrated data is...

DanaBot Stealer: Multistage MaaS Malware Resurfaces

Summary: DanaBot is a covert malware designed for the discreet theft of sensitive data for financial gain. Unlike ransomware, its focus is on prolonged persistence rather than immediate disruption. Functioning as a malware-as-a-service MaaS platform, DanaBot is versatile, targeting individuals,...

Cactus Ransomware Exploits Vulnerabilities in Qlik Sense

Summary: The Cactus ransomware is actively exploiting critical Qlik Sense vulnerabilities, with the ultimate goal of establishing persistence and enabling remote control, infiltrating corporate networks stealthily. This serves as a stark reminder that unpatched Qlik Sense instances are prime...

CVE-2023-40074

CVE-2023-40074 affects Google Android via a flaw in PersistableBundle.java (saveToXml): invalid data can cause local persistent denial of service without user interaction. Impacted component: Android framework (PersistableBundle.java). Exploitation is described as local; no in-the-wild exploitati...

PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

The Wordfence Threat Intelligence Team has recently been informed of a phishing campaign targeting WordPress users. The Phishing email claims to be from the WordPress team and warns of a Remote Code Execution vulnerability on the users site with an identifier of CVE-2023-45124, which is not...

Malicious code in requestlyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b16c69c74c2cafa07703d192538599de6e5d1ebbf1323b4cd76366e26db58d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coloureds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f381cffa410c14f42e50fcebd0f587b105b4756f34b5a05912f38b84fdc798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vivo-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DynastyPersist - A Linux Persistence Tool!

A Linux persistence tool! A powerful and versatile Linux persistence script designed for various security assessment and testing scenarios. This script provides a collection of features that demonstrate different methods of achieving persistence on a Linux system. Features 1. SSH Key Generation:...

Malicious code in tessa-npm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e612f6e8fb0bbb74366928dddf1b34e91f54e4bef8567591fae02dc94d22461e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab. "The malware itself is split into multiple components, including a loader, injector, downloader and backdoor, and successful requests to C2-controlled servers are often...

Malicious code in nextcapital-client-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0e25c92e1549fcd09f8a8f6bcf300247c61cf6e6c5f70da615d7167d603d531 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starling-api-web-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6235

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

Malicious code in footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d840202ac5d63ed914d72fb9165d5dacf64b5449aeca46d1fb168c12f7627160 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Duet Display Security Vulnerability

Duet Display is a remote desktop application. A security vulnerability exists in Duet Display version 2.5.9.1 that stems from the presence of an uncontrolled search path element vulnerability. An attacker can place an arbitrary libusk.dll file in the C:UsersuserAppDataLocalMicrosoftWindowsApps...