MAL-2023-8090 Malicious code in cloud-message-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479df48e71ae41e05b71f56e47a5a0a444e5992d40ed13730baf980dd5d3e7ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32663

Incorrect default permissions in some IntelR RealSenseTM SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32663

Incorrect default permissions in some IntelR RealSenseTM SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-23943 · Intel · Intel Realsense Sdks

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM SDKs version 2.53.1 IntelR RealSenseTM SDKs version 0.25.0 Description: The issue is related to incorrect default permissions in some IntelR RealSenseTM SDKs, which may allow an authenticated user to potentially enable...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

Design/Logic Flaw

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access...

Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update thei...

5 Best Video Editing SDKs for iOS

By Owais Sultan Video editing SDKs are great tools for creating and launching your products much more quickly. However, picking the… This is a post from HackRead.com Read the original post: 5 Best Video Editing SDKs for iOS...

Massive Ad Fraud Scheme Targeted Over 11 Million Devices with 1,700 Spoofed Apps

Researchers have shut down an "expansive" ad fraud scheme that spoofed more than 1,700 applications from 120 publishers and impacted roughly 11 million devices. "VASTFLUX was a malvertising attack that injected malicious JavaScript code into digital ad creatives, allowing the fraudsters to stack...

GHSA-8F7F-VQG5-JRV9 .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...

SentinelOne impersonated via PyPI packages

In December 2022, threat actors impersonated SentinelOne by uploading fake software development kits SDKs onto PyPI. The SDKs contain fully functional SentinelOne clients, but the packages also contained malicious backdoors that are only executed when called on programmatically, as opposed to...

PT-2022-28245 · Sentinelone · Sentinelone

Name of the Vulnerable Software and Affected Versions: SentinelOne affected versions not specified Description: Threat actors impersonated SentinelOne by uploading fake software development kits SDKs onto PyPI. These SDKs contained fully functional SentinelOne clients but also included malicious...

GO-2022-1117 Insufficient verification of proofs in github.com/codenotary/immudb

In certain scenarios, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list of...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. The library does not properly validate SDKs server UUIDs which allows a malicious server to change the reported UUID, tricking the client to treat it as a different server thus accepting a state completely irrelevant to the one...

CVE-2022-36111

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

Hackers Exploiting Abandoned Boa Web Servers to Target Critical Industries

Microsoft on Tuesday disclosed the intrusion activity aimed at Indian power grid entities earlier this year likely involved the exploitation of security flaws in a now-discontinued web server called Boa. The tech behemoth's cybersecurity division said the vulnerable component poses a "supply chai...

CVE-2022-36111 immundb has insufficient verification of data authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...