517 matches found
Malicious code in itchy_gecko_magenta-98 (npm)
Part of a self-republishing campaign: generated names of the form -, each package shipping the same autopublish.js, which runs npm publish --access public to publish the package again. Self-replicating publication is the propagation step of a registry worm and fills the registry with copies...
Malicious code in junior_cardinal_coffee-98 (npm)
Source: amazon-inspector d004a3a8c298c191e6f6163d74774e39949c807053b57ff508eea0e81fc3fb88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Astra Linux – Vulnerability in Chromium
The use of "after free" in Window Dialogs in Google Chrome before version 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The use of after free in ANGLE in Google Chrome before version 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Malicious code in icha-98 (npm)
Source: amazon-inspector e97adcc0d5c03a98c1790d7ff5e147a34efe9238daed99b5b1e49abac0a6e6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hariyono-98 (npm)
Source: amazon-inspector eca986344dccf321089b8343740d848ee1417d108d80841c034ed57cbbddf5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
APSB26-98 : Security updates available for Adobe Experience Manager
Adobe has released a security update for Adobe Experience Manager AEM. This update addresses important and moderate vulnerabilities that could result in privilege escalation, security feature bypass, and arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issue...
Malicious code in efficient_catfish_chocolate-98 (npm)
Source: amazon-inspector dfd732b49a0427bfc58e053c4a6522ab6c865e4163a9e6ca33e705d3096121c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dominant_condor_cyan-98 (npm)
Source: amazon-inspector 5df65015eb0ad73ea416c905871fefcc0cfaf3e5ce210669b60084744f3b16c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in continued_orangutan_magenta-98 (npm)
Source: amazon-inspector 1816ff6513cd70043729c9fe4a2fe6610b19e1953af4f30c6532f196378e5447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cinta-98 (npm)
Source: amazon-inspector 3de2c93e601cd264677347f9bb38615005f1fb5ae5e752c685d82216890a5273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview efficientcatfishchocolate-98 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in attractive_cobra_azure-98 (npm)
Source: amazon-inspector db90cf908fed146e0e48893e965d05224ec1c9b88648074dc502184c049d7560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in assistant_pheasant_indigo-98 (npm)
Source: amazon-inspector 1bb483ad60a8184691e4a5dae1cc1be52fa38d6692cc0804f399575a151b413e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
PT-2026-76513
The NIP-98 HTTP authorization parser Base64-decoded the complete authorization value and parsed the resulting JSON event without applying an application-level size limit. Both operations occurred before the event's signature and authorization fields could be validated. An unauthenticated remote...
Malicious Package
Overview icha-98 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
pantry
▄▄ ▄▄ ▄█▀▀█▄ █▄ █...
MiracleLinux 4 : openldap-2.4.19-15.AXS4.2 (AXSA:2011-98:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-98:01 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for...
CVE-2003-1569
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...