Malicious code in @fixedwidthtable/fixedwidthtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb1ded01c24b9c7b6ce54eede679199fa8564a984ca86323c750500b1f50649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jake-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b68dd08145ebfefd1660159fac302e02d16e89fe9c227d0bb307daa8c5ed05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chand-trick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa48292b38080512f81bc5147db8404dfdb6238a716fb2f0904533e14c25d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-nvt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96380ff5d08b4a65d9a20156bb99f8945ff4b34487354b250d78b583013b8d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-reygie-harizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b226744d0d61efb80f943c5fbb09b58cd8f8fb2fb1da081fad506086431e076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etheres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2233d7c65c25f473a3361254525a58f1182dfe5f8f3e9f0f4ac0dd68a43401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 38 Update: redis-7.0.13-1.fc38

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

The vulnerability of the Redmine project and task management web application relates to incorrect session expiration times, allowing attackers to continue existing user sessions after two-factor authentication is enabled.

The vulnerability of the Redmine project and task management web application is related to an incorrect session expiration time. Exploiting this vulnerability allows a malicious actor to continue existing user sessions after two-factor authentication is enabled...

Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets

Since February 2023, Microsoft has observed password spray activity against thousands of organizations carried out by an actor we track as Peach Sandstorm HOLMIUM. Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and...

Malicious code in purplebricks-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166a338cbf2061c2c522db795a33313847ac718197150d27111861792523592c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in portal-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768a95f370e1b55036ea06a3987092eb217f0a763c28953fcf3bb8c11fb0c580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compound-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0dad92106109573fa87fb5128e40603bd23ee2d0b011e879633a5a057a08b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa2083cd444530581252c21173e1cc7baccb1f0562cd626040ed4cf407cf5b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

A new malware loader called HijackLoader is gaining traction among the cybercriminal community to deliver various payloads such as DanaBot, SystemBC, and RedLine Stealer. "Even though HijackLoader does not contain advanced features, it is capable of using a variety of modules for code injection a...

Malicious code in chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by SORTRO and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been...

CVE-2023-41053

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by SORTRO and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem exists in Redis 7.0 or newer and has been...

Malicious code in @ks-radar/radar-resource-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87dc5d2bd88d23f785e0324f66bfd8597fbf9db14a34354d35c9578e0c98d0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

Threat actors are exploiting poorly secured Microsoft SQL MS SQL servers to deliver Cobalt Strike and a ransomware strain called FreeWorld. Cybersecurity firm Securonix, which has dubbed the campaign DBJAMMER, said it stands out for the way the toolset and infrastructure is employed. "Some of the...