Fedora 38 : redis (2023-c406ba1ff6)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c406ba1ff6 advisory. Redis 7.0.12 - Released Mon July 10 12:00:00 IDT 2023 Upgrade urgency SECURITY: See security fixes below. Security Fixes: CVE-2022-24834 A specially...

Malicious code in ux-translation-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1c7fc5ab29649fa65f5fbebcceb914ec5132e7c0a46b38a656b508274a5098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-horizon-remaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82aee22fcb9d69dc1b8ec8823954165ce545b1ab39eebd6f330094e1b84af84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sssssssignalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15cc23bf354e5520194687388c9f9fedf32c28fbdd1bdaeb8abb7a0b1943f352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelov3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d5c2cfcabc91d71e694daa9c1ed247545a624da57ad205f877c620401bf5f73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2baa7413e9468acd20ce003a6b7caa412c7a2e6cd7d941702add8ac4dcd0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-siwoo-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9273c6939c7a7760a350513f92afeff5af2d0373e575285a61baa1342870b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Old Blackmoon Trojan, NEW Monetization Approach

Rapid7 is tracking a new, more sophisticated and staged campaign using the Blackmoon trojan, which appears to have originated in November 2022. The campaign is actively targeting various businesses primarily in the USA and Canada. However, it is not used to steal credentials, instead, it implemen...

CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...

CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...

UBUNTU-CVE-2023-29454

Stored or persistent cross-site scripting XSS is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload e.g., in a database or server-side text files, and finally, the application unintentionally executes the payload for every victi...

How to Verify Load Balancing Cookie Insert Persistence on NetScaler

...

CVE-2023-3595

CVE-2023-3595 affects Rockwell Automation 1756 EN2* and EN3* ControlLogix communication modules. The issue is an out-of-bounds write that could allow a remote attacker to execute arbitrary code with persistence via malicious CIP messages, risking modification, denial, and exfiltration of data and...

Malicious code in fca-tuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d79cf7f0c8b529c853f6fad71dbc1ce8655d7f7356cf001fe8c6b5142ed7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-18040 · Google · Android

Name of the Vulnerable Software and Affected Versions: OneTimePermissionUserManager.java affected versions not specified Description: The issue is caused by a logic error in the code of OneTimePermissionUserManager.java, specifically in the getCurrentState method. This error allows one-time...

PT-2023-25503 · Keeper · Keeper Password Manager For Desktop +1

Name of the Vulnerable Software and Affected Versions: Keeper Password Manager for Desktop version 16.10.2 KeeperFill Browser Extensions version 16.5.4 Description: An issue allows local attackers to gain sensitive information via plaintext password storage in memory after the user is already...

Malicious code in fca-tpk05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e686517998e98824fb4c4bde8bf891215eee0f0274b60fe8d5620402ec1953b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New TOITOIN Banking Trojan Targeting Latin American Businesses

Businesses operating in the Latin American LATAM region are the target of a new Windows-based banking trojan called TOITOIN since May 2023. "This sophisticated campaign employs a trojan that follows a multi-staged infection chain, utilizing specially crafted modules throughout each stage," Zscale...

Malicious code in hamlit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce9dac66892a9767b3f04fe73b5e116a60654a3eed3c9ea1098b06527e6ac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-dongdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a178ae400bbd58633f7d8005bd8c591a3adbba417117cba116f6f7a6d97d569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...