MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-11914 Malicious code in orderly.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d606d970811240b8c005b7dc9ac5ee50ff9d2d77e9a14a34703c115392b1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11849 Malicious code in 000webhost-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebaa53f52123e742b45f9522b1d34050c780aef52753f43915cab93f159243d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-53900 CVE-2024-53042 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning 1. Fix by using...

DEBIAN-CVE-2024-53042

In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning 1. Fix by using...

CVE-2024-53047 mptcp: init: protect sched with rcu_read_lock

In the Linux kernel, the following vulnerability has been resolved: mptcp: init: protect sched with rcureadlock Enabling CONFIGPROVERCULIST with its dependence CONFIGRCUEXPERT creates this splat when an MPTCP socket is created: ============================= WARNING: suspicious RCU usage 6.12.0-rc...

CVE-2024-50304

The CVE-2024-50304 entry concerns the Linux kernel IPv4 ip_tunnel subsystem. A suspicious RCU usage warning in ip_tunnel_find() was addressed by adding a lockdep check to hlist_for_each_entry_rcu(), validating that the RTNL mutex is held. The per-netns IP tunnel hash table is protected by the RTN...

Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar

Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It's a chilling reality, becoming more common and concerning by the day. These attackers exploit vulnerabilities in SaaS and cloud environments, using...

Exploit for Code Injection in Vmware Spring_Framework

Project Spring4Shell CVE-2022-22965 Blocker Firewall Se...

PT-2024-6717

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: The issue is related to an SQL injection vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to reveal Expedition...

MAL-2024-9041 Malicious code in dx-hotels-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8996 Malicious code in @mallutrojan005/coveralls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735ee63af3d7bfaf8e5af37b0bd6a8034f4283ad069c65241a1c3f6c8ea7100 The OpenSSF Package Analysis project identified '@mallutrojan005/coveralls' @ 2.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-46830

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm-srcu when handling KVMSETVCPUEVENTS Grab kvm-srcu when processing KVMSETVCPUEVENTS, as KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory. Note,...

CVE-2024-46830 KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm-srcu when handling KVMSETVCPUEVENTS Grab kvm-srcu when processing KVMSETVCPUEVENTS, as KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory. Note,...

CVE-2024-46830 KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm-srcu when handling KVMSETVCPUEVENTS Grab kvm-srcu when processing KVMSETVCPUEVENTS, as KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory. Note,...

CVE-2024-46830

CVE-2024-46830 affects the Linux kernel KVM for x86. The vulnerability arises when acquiring kvm->srcu while handling KVM_SET_VCPU_EVENTS, because KVM will forcibly leave nested VMX/SVM during SMM toggling and leaving nested VMX can read guest memory. The described fix: grab SRCU unconditional...

Expert Tips on How to Spot a Phishing Link

Phishing attacks are becoming more advanced and harder to detect, but there are still telltale signs that can help you spot them before it's too late. See these key indicators that security experts use to identify phishing links: 1. Check Suspicious URLs Phishing URLs are often long, confusing, o...

MAL-2024-8934 Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

How to Detect Suspicious API Traffic

...

MAL-2024-8708 Malicious code in @google-research/retvecjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7a64d316c75e0e53a3a525a50d591725648d0064b5f1d5c622b3c94ef5aaf30 The OpenSSF Package Analysis project identified '@google-research/retvecjs' @ 100.999.99 npm as malicious. It is considered malicious because: -...