RHSA-2011:0163 Red Hat Security Advisory: kernel security and bug fix update

Bulletin has no description...

MAL-2024-11604 Malicious code in hahahasillyxd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f43efeb00e7f4fc1fd008a187b98b8c8fee1cf25f30ee8723ce1080b5fa6a323 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

MAL-2025-937 Malicious code in jamasp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 25cefd0eb9561401dbc711a241f7379bfca98d832180533aa96c96fa3e84f53b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2983 Malicious code in otc-metadata (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75435783250226bc7f234b0f98e4fb2b9777254a2ddbe179800f61577f6308e0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11703 Malicious code in security-automation-job (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 38eb272538ac306cb26b84b3887bf6fd77f00fe00e64a10814f34258702eb442 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-914 Malicious code in dependency133434fr43437 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9cc68a9f63c26e040592558af43d4f7ef6369cbf6623c8f2558fc490acfabb73 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3452 Malicious code in mytonctrl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f997ec37c93c6c57b2a2704bba3894f44988a24fcee8ad1766ab15ac87460c3a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4239 Malicious code in rqeuets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92b72b3d477812895ac9758fb085afd1bc8840f817d7bcc491b4b36c8215e79d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11525 Malicious code in arnold-toolbox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3af217ab42360fa62b1e1e03668e6d7e45ce26df78ea96f2c6726838d74d82d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CGA-RQ45-R87H-66C4

Bulletin has no description...

How to check installed EPA library checksum on NetScaler

How to check installed EPA library checksum on NetScaler...

Scribe Platform: End-to-end Software Supply Chain Security

As software supply chain security becomes more and more crucial, security, DevSecOps, and DevOps teams are more challenged than ever to build transparent trust in the software they deliver or use. In fact, in Gartner recently published their 2022 cybersecurity predictions - not only do they...

OSV-2022-532 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48658 Crash type: Null-dereference READ Crash state: NULL...

CVE-2021-23861

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed...

Design/Logic Flaw

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed...

OPENSUSE-SU-2021:3531-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data bsc1184522. - CVE-2018-20679: Fixed out of bounds read in udhcp bsc1121426. - CVE-2018-1000517: Fixed buffer overflow in the retrievefiledata bsc1099260. -...

OWASP's 2021 List Shuffle: A New Battle Plan and Primary Foe

Code injection attacks, the infamous king of vulnerabilities, have lost the top spot to broken access control as the worst of the worst, and developers need to take notice. In this increasingly chaotic world, there have always been a few constants that people could reliably count on: The sun will...

SUSE-SU-2021:3289-1 Security update for glibc

This update for glibc fixes the following issues: Security issues fixed: - CVE-2021-35942: wordexp: handle overflow in positional parameter number bsc1187911 - CVE-2021-33574: Use pthreadattrcopy in mqnotify bsc1186489 Also the following bug was fixed: - Avoid concurrency problem in ldconfig...

CVE-2021-38396

The CVE-2021-38396 issue affects Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor Model 3120. The vulnerability is due to the programmer installation utility not performing cryptographic authenticity or integrity checks on software on the flash drive, enabling an attacker with physical...

CVE-2021-41087 Improperly Implemented path matching for in-toto-golang

in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticated attackers posing as functionaries i.e., within a trusted set of users for a layout are able to create attestations that may bypass DISALLOW rules in the sa...