CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...

CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...

UBUNTU-CVE-2023-29454

Stored or persistent cross-site scripting XSS is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload e.g., in a database or server-side text files, and finally, the application unintentionally executes the payload for every victi...

How to Verify Load Balancing Cookie Insert Persistence on NetScaler

...

CVE-2023-3595

CVE-2023-3595 affects Rockwell Automation 1756 EN2* and EN3* ControlLogix communication modules. The issue is an out-of-bounds write that could allow a remote attacker to execute arbitrary code with persistence via malicious CIP messages, risking modification, denial, and exfiltration of data and...

Malicious code in fca-tuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d79cf7f0c8b529c853f6fad71dbc1ce8655d7f7356cf001fe8c6b5142ed7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-18040 · Google · Android

Name of the Vulnerable Software and Affected Versions: OneTimePermissionUserManager.java affected versions not specified Description: The issue is caused by a logic error in the code of OneTimePermissionUserManager.java, specifically in the getCurrentState method. This error allows one-time...

PT-2023-25503 · Keeper · Keeper Password Manager For Desktop +1

Name of the Vulnerable Software and Affected Versions: Keeper Password Manager for Desktop version 16.10.2 KeeperFill Browser Extensions version 16.5.4 Description: An issue allows local attackers to gain sensitive information via plaintext password storage in memory after the user is already...

Malicious code in fca-tpk05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e686517998e98824fb4c4bde8bf891215eee0f0274b60fe8d5620402ec1953b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ch.admin.bit.jeap:jeap-archrepo-docgen (>=2.10.0 <=6.2.0), ch.admin.bit.jeap:jeap-archrepo-importer-messagetype (>=1.10.0 <=6.2.0) +505 more potentially affected by CVE-2023-35887 via org.apache.sshd:sshd-sftp (>=2.0.0 <=2.9.2)

org.apache.sshd:sshd-sftp MAVEN version =2.0.0, =2.10.0, =1.10.0, =1.10.0, =1.15.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =1.1.0, =1.1.1 - com.ailbb:alt =1.5 - com.amashchenko.maven.plugin:gitflow-maven-plugin =1.21.0 and more Source cves: CVE-2023-35887 Source...

New TOITOIN Banking Trojan Targeting Latin American Businesses

Businesses operating in the Latin American LATAM region are the target of a new Windows-based banking trojan called TOITOIN since May 2023. "This sophisticated campaign employs a trojan that follows a multi-staged infection chain, utilizing specially crafted modules throughout each stage," Zscale...

Malicious code in hamlit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce9dac66892a9767b3f04fe73b5e116a60654a3eed3c9ea1098b06527e6ac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-dongdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a178ae400bbd58633f7d8005bd8c591a3adbba417117cba116f6f7a6d97d569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecorp-secret-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d0bf7826238a624701946507e61cf63dc75ea421397e13d125e2721546c812f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confusion-1337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5e0f5fa705444941a3db8182bfc9c7eacb35a3bda7f57cccae5e088eb93404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Stored Xss in Question field due to lack of sanitization in Link.php

Description Stored XSS Cross-Site Scripting is a type of web application vulnerability that allows an attacker to inject malicious scripts into a website or web application. Unlike reflected XSS, where the malicious script is embedded in a URL and executed immediately, stored XSS involves the...

New Variant of RUSTBUCKET Malware Targeting Cryptocurrency Providers

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary RUSTBUCKET malware family is actively developing, adding persistence capabilities, while the REF9135 operation by the DPRK targets cryptocurrency service providers. To receive real-time threat advisories...

Beware: New 'RustBucket' Malware Variant Targeting macOS Users

Researchers have pulled back the curtain on an updated version of an Apple macOS malware called RustBucket that comes with improved capabilities to establish persistence and avoid detection by security software. "This variant of RustBucket, a malware family that targets macOS systems, adds...

Beware: New 'RustBucket' Malware Variant Targeting macOS Users

Researchers have pulled back the curtain on an updated version of an Apple macOS malware called RustBucket that comes with improved capabilities to establish persistence and avoid detection by security software. "This variant of RustBucket, a malware family that targets macOS systems, adds...

Iranian Hackers Using POWERSTAR Backdoor in Targeted Espionage Attacks

Charming Kitten, the nation-state actor affiliated with Iran's Islamic Revolutionary Guard Corps IRGC, has been attributed to a bespoke spear-phishing campaign that delivers an updated version of a fully-featured PowerShell backdoor called POWERSTAR. "There have been improved operational security...