21220 matches found
Malicious code in @fdp-tools/helm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9106 Malicious code in @fdp-tools/helm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9105 Malicious code in @fdp-tools/eslint-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...
MAL-2024-9107 Malicious code in @fdp-tools/observability (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3470fe72252929511b982b06c857fe2d4c8030b512a880c9bc15a088be17c838 The OpenSSF Package Analysis project identified '@fdp-tools/observability' @ 1.1.3 npm as malicious. It is considered malicious because: - The...
Malicious code in @fdp-tools/artifactory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1bc272c51a6ad1997aaaa84623c7746d308a5e53386e01c6845e1b849c7ffa The OpenSSF Package Analysis project identified '@fdp-tools/artifactory' @ 0.0.10 npm as malicious. It is considered malicious because: - The...
MAL-2024-9103 Malicious code in @fdp-tools/artifactory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1bc272c51a6ad1997aaaa84623c7746d308a5e53386e01c6845e1b849c7ffa The OpenSSF Package Analysis project identified '@fdp-tools/artifactory' @ 0.0.10 npm as malicious. It is considered malicious because: - The...
Malicious code in @fdp-tools/bitbucket (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d664e4e984c9abf294fae57cd50adb612a619b9eb307464e5cb57d6da167de8 The OpenSSF Package Analysis project identified '@fdp-tools/bitbucket' @ 0.2.7 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-9104 Malicious code in @fdp-tools/bitbucket (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d664e4e984c9abf294fae57cd50adb612a619b9eb307464e5cb57d6da167de8 The OpenSSF Package Analysis project identified '@fdp-tools/bitbucket' @ 0.2.7 npm as malicious. It is considered malicious because: - The packa...
Malicious code in @fdp-tools/snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...
KLA73906 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual C++...
Important: Red Hat Security Advisory: container-tools:rhel8 security update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Modernizing Your VM Program with Rapid7 Exposure Command: A Path to Effective Continuous Threat Exposure Management
In today’s threat landscape, where cyber-attacks are increasingly sophisticated and pervasive, organizations face the daunting challenge of securing a constantly expanding attack surface. Traditional vulnerability management VM programs, while necessary, are no longer sufficient on their own. The...
CVE-2024-47611
CVE-2024-47611 affects XZ Utils on Windows platforms built with MinGW-w64 or MSVC for the command-line tools in versions 5.6.2 and earlier. The underlying issue is command-line argument handling where Unicode characters that do not exist in the legacy code page are converted to similar-looking ch...
CVE-2024-47611 XZ Utils on Microsoft Windows platform are vulnerable to argument injection
XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...
RHSA-2023:6172 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
Bulletin has no description...
RHSA-2023:6171 Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update
Bulletin has no description...
PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data
A new set of malicious packages has been unearthed in the Python Package Index PyPI repository that masqueraded as cryptocurrency wallet recovery and management services, only to siphon sensitive data and facilitate the theft of valuable digital assets. "The attack targeted users of Atomic, Trust...
The vulnerability of the software tools for managing identification and access control, as well as the ID Link Manager and the resource planning software FUJITSU Software TIME CREATOR, allows a perpetrator to gain unauthorized access to read and modify confidential information.
The vulnerability of the software tools for managing identification and access to the ID Link Manager, as well as the resource planning software FUJITSU Software TIME CREATOR, is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an...