Friday Squid Blogging: Squid-Inspired Fluid Pump

This fluid pump was inspired by the way squids propel themselves through the water. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

CVE-2021-33883

A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration...

CVE-1999-0814

Red Hat pump DHCP client allows remote attackers to gain root access in some configurations...

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...

CVE-2024-2061

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/editsupplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-2062

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. This issue affects some unknown processing of the file /admin/editcategories.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

Malicious code in buta-faina-agaana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9265548bbd550022f66995309b905d7881b2085669d7bce783754de772b87ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fc4b13dd6b2b59d0f7f6210d249cc3db753129912b21c8c52521965a258119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2017-4265

Malware in sbrugna...

EUVD-2020-19777

Malware in sbrugna...

EUVD-2012-0774

Malware in sbrugna...

EUVD-2020-19781

Malware in sbrugna...

EUVD-2020-19771

Malware in sbrugna...

EUVD-2020-22762

Malware in sbrugna...

EUVD-2009-3393

Malware in sbrugna...

EUVD-2020-19785

Malware in sbrugna...

EUVD-2008-2597

Malware in sbrugna...

EUVD-2011-3349

Malware in sbrugna...

EUVD-2020-19789

Malware in sbrugna...