Security Bulletin: IBM Security Verify Information Queue uses a Google gRPC framework with multiple vulnerabilities (CVE-2017-7860, CVE-2017-7861, CVE-2017-9431)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the Google RPC gRPC framework that is vulnerable to denial of service and buffer overflow attacks. ISIQ v10.0.3 upgraded its connect image to include a newer gRPC level that remediates the...

Security Bulletin: IBM Security Verify Information Queue web-app container is vulnerable to denial of service attack (CVE-2022-35283)

Summary The web-app container in IBM Security Verify Information Queue ISIQ v10.0.2 can be shut down with a malformed HTTP request. ISIQ v10.0.3 has implemented stricter URL validation to prevent this type of denial of service attack. CVE-2022-35283 Vulnerability Details CVEID:CVE-2022-35283...

Malicious Package

Overview wad-workshop-starter is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview starter-react-frontend-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious code in wad-workshop-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b52731d8d5da8ee84613a13cbe9af2b0c7ad22280e6b81e461977257d682892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fed-challenge-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225b081f29561b9d3a9e737de52432acb6d9d59794a1d05e2ec47e1d8d8721c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2998 Malicious code in fed-challenge-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225b081f29561b9d3a9e737de52432acb6d9d59794a1d05e2ec47e1d8d8721c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wf-kyt-starter-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b5c444b3322f081575357114b16efafce8ede863084892e01e10bf6b7f00ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7121 Malicious code in wf-kyt-starter-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b5c444b3322f081575357114b16efafce8ede863084892e01e10bf6b7f00ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wf-kyt-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb483b16a8f2f52251441e62a4b58791d067815f0be0614ea77744711dcd074d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-full-stack-starter-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52fe13ffd214292aa373989d719d8be01b3890076789fa9d05fa2341385f5dc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in talon-template-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cba7b477e6e7c8fa9c79551e7a5035c22a680dcfbfaefba806a9c0c7a7b2046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6414 Malicious code in talon-template-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cba7b477e6e7c8fa9c79551e7a5035c22a680dcfbfaefba806a9c0c7a7b2046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-pay-cloud-starter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1988214db41a3d1764e3f6536359acbc08be5c669740b341aa43ace49cfe55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6986 Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1085597e357b5b1d2b12ab109ff9c279fa1cbca538e418cf962f34265384141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9210f72432e30c8a8971391592a1868df8981aa891e80a7af8dbd2822f1b499d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6296 Malicious code in starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9210f72432e30c8a8971391592a1868df8981aa891e80a7af8dbd2822f1b499d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress GloriousThemes Starter Sites plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress GloriousThemes Starter Sites plugin versions = 1.0.1. Solution No patched version available...

WordPress WordPress Everse Starter Sites – Elementor Templates plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Everse Starter Sites – Elementor Templates plugin versions = 1.1. Solution Update the WordPress WordPress Everse Starter Sites – Elementor Templates plugin to the latest available version at...