Malicious code in node-pino (npm)

node-pino is a one-edit typosquat of the popular pino logger that ships repackaged winston plus a malicious postinstall dropper. On npm install, the postinstall hook npm run license - node lib/winston/license spawns a DETACHED, unref'd child process that reads an AES-256-CBC-encrypted blob...

CVE-2026-1224

Tanium addressed an uncontrolled resource consumption vulnerability in Discover...

CVE-2026-1224

Technical details are not publicly available in the provided documents; no information on affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2026-1224 Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Tanium addressed an uncontrolled resource consumption vulnerability in Discover...

CVE-2026-1224

Tanium addressed an uncontrolled resource consumption vulnerability in Discover...

MiracleLinux 7 : gstreamer1-plugins-good-1.4.5-3.el7 (AXSA:2017-1224:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1224:01 advisory. GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything fr...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

EUVD-2016-1224

Malware in sbrugna...

CVE-2013-1224

Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted 1 HTTP or 2 HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369...

CVE-2025-1224

creationtimestamp| type| source ---|---|--- 2025-02-12 19:37:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113992602398671772 2025-02-12 20:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyyi56a632x 2025-02-12 22:45:20+00:00| seen|...

CVE-2025-1224

CVE-2025-1224 affects the ywoa system (up to 2024.07.03) with an SQL injection in the function listNameBySql of com/cloudweb/oa/mapper/xml/UserMapper.xml. The vulnerability arises from how the SQL is constructed in listNameBySql, allowing remote attackers to manipulate queries. Public disclosures...

CVE-2025-1224 ywoa UserMapper.xml listNameBySql sql injection

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-1224 ywoa UserMapper.xml listNameBySql sql injection

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2015-1224

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...

CVE-2024-1224

creationtimestamp| type| source ---|---|--- 2024-03-06 13:31:23+00:00| seen| https://t.me/ctinow/201318 2024-03-06 13:31:29+00:00| seen| https://t.me/ctinow/201323...

CVE-2024-1224

The CVE-2024-1224 issue affects USB Pratirodh, specifically in the user login component where SHA-1 is used for hashing. A local attacker with administrative privileges could exploit this weakness to obtain the password on the targeted system, enabling them to take control of the application and ...

CVE-2024-1224 Information Disclosure Vulnerability in CDAC USB Pratirodh

This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm hash SHA1 in user login component. A local attacker with administrative privileges could exploit this vulnerability to obtain the password of USB Pratirodh on the targeted system. Successful exploitati...

openSUSE 15 Security Update : opera (openSUSE-SU-2023:0114-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0114-1 advisory. - Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a...

Mageia: Security Advisory (MGASA-2023-0090)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Mar 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...