351 matches found
Security-101
🌐 Multi-Language Support Supported via GitHub Action Automated & Always Up-to-Date Arabic | Bengali | Bulgarian | Burmese Myanmar | Chinese Simplified | Chinese Traditional, Hong Kong | Chinese Traditional, Macau | Chinese Traditional, Taiwan | Croatian | Czech | Danish | Dutch | Estonian | Finni...
Hypervisor-101-in-Rust
Hypervisor 101 in Rust The materials of the "Hypervisor 101 in Rust" class held at Global Cybersecurity Camp 2023 Singapore. This repository contains a fuzzing hypervisor for UEFI on Intel/AMD processors, lecture and hands-on exercise materials, and sample corpus and target files. Read the course...
CVE-2026-98741
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initialization. An attacker who connects a specially crafted USB...
Astra Linux – Vulnerability in Firefox
If array shift operations are not used, the Garbage Collector may become confused regarding valid objects. This vulnerability affects Firefox versions less than 101...
Astra Linux – vulnerability in Firefox and Thunderbird
Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited to...
Astra Linux – vulnerability in Firefox and Thunderbird
When exiting fullscreen mode, an iframe might cause the browser to become confused regarding its current fullscreen state, potentially leading to user confusion or spoofing attacks. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...
Astra Linux – vulnerability in Firefox
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100. Some of these bugs showed evidence of memory corruption; we assume that with sufficient effort, some of them could have been exploited ...
Astra Linux – Vulnerability in Firefox
Firefox’s HTML parser did not correctly interpret HTML comment tags, leading to inconsistencies with other browsers. This vulnerability could have been exploited to embed user-controlled data within HTML comments on pages. This issue affects Firefox versions prior to 101...
heap-exploits-101
Heap Exploits 101 — From 0 to Hero A complete, self-contain...
Astra Linux – Vulnerability in Chromium
Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass the trusted types policy through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of the HTML parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of the Extensions API in Google Chrome prior to version 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension...
Malicious code in icha-101 (npm)
Source: amazon-inspector 20183fac91c7dd314ad351b599486fb0aff2040e11e58a67da3de9342c4dd6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hariyono-101 (npm)
Source: amazon-inspector c438411178f4ece6d66c7576eabe96c3acfec586e8f258d74e0943d7e2b283a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eng-101-solutions-test (npm)
The package eng-101-solutions-test was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in coveo-101-commerce (npm)
Source: ossf-package-analysis fc0cdf6355009bbf0e2512408fb6f96d5c1febe666618b3aece404301afc171f The OpenSSF Package Analysis project identified 'coveo-101-commerce' @ 3.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...
Malicious Package
Overview icha-101 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
[SECURITY] Fedora 43 Update: kernel-7.0.14-101.fc43
The kernel meta package...
@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter
Summary @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, but the default scrubSensitiveHeaders callback in RedirectHandlerOptions uses case-sensitive property deletion delete headers.Authorization, delete...
GHSA-2J82-37XG-F9WP gun has an Unexpected Status Code or Return Value vulnerability
Unexpected Status Code or Return Value vulnerability in ninenines gun gunhttp module allows a malicious HTTP server to force the client into raw protocol mode via an unsolicited 101 Switching Protocols response. In gunhttp:handleinform/8, when a 101 Switching Protocols response is received over...