Malicious code in sync-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 335de7612c8237e0a74d2c894424bda2c8a5e6547fa9bb6782ec0a94d4353226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in sync-axios

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nylas-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2deede55e9c84cfc6a261b2de7de468c49dd03fe6cdee3eda009eeaa0cdb0a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nylas-sync

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-79 Malicious code in nylas-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2deede55e9c84cfc6a261b2de7de468c49dd03fe6cdee3eda009eeaa0cdb0a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

January 2, 2024, update for OneNote 2016 (KB5002500)

None None...

CLZero - A Project For Fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and...

PT-2023-8034 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue concerns arbitrary command execution in the host time parameter of the NTPSyncWithHost interface of the cstecgi .cgi. This vulnerability exists due to the lack of measures...

GHSA-F23H-52HJ-99P6 Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue...

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2023-33106

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND...

CVE-2023-33106

CVE-2023-33106 is a memory corruption vulnerability in Qualcomm graphics drivers, caused by an out-of-range pointer offset when submitting a large list of sync points to IOCTL_KGSL_GPU_AUX_COMMAND. Affected component is Qualcomm chipsets’ graphics subsystem (KGSL driver). The issue is locally exp...

CVE-2023-33106: Use of Out-of-range Pointer Offset

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTLKGSLGPUAUXCOMMAND...

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

SUSE CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

DEBIAN-CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

AZL-32050 CVE-2023-45286 affecting package packer for versions less than 1.8.7-1

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...