CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...

CVE-2023-26095

CVE-2023-26095 affects Stormshield Network Security (SNS): ASQ in SNS versions 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 crashes when processing a crafted SIP packet. Root cause not detailed in the provided documents. Remediation: upgrade to SNS 4.3.16 or 4.6.3 (as applicable). Exploit informat...

Validating input parameters with the max value of uint

Lines of code Vulnerability details Impact Validating input values with uint256.max will not revert in any condition as solidity v0.8.0 reverts on overflow and underflow. Detailed description of the impact of this finding. Due to solidity v0.8.0 which reverts on overflow and underflow of integer...

Lack of events in EvolvingProteus contract

Lines of code Vulnerability details Impact There is no event emitted in the whole contract, even after executing sensitive actions like swaps between assets or at the constructor. That is bad because many automatic tools that monitors the contracts deployed rely on them. For example, see the swap...

Wireshark Denial of Service Vulnerability (CNVD-2023-72254)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial-of-service vulnerability that originates from an infinite...

MAL-2023-7919 Malicious code in aws-encryption-sdk-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in ux-authentication-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acc992350d87b94d42d60618d28b4f1111d7b55add45c9262f23033782743741 The OpenSSF Package Analysis project identified 'ux-authentication-auth0' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

PT-2023-5458 · Notepad++ · Notepad++

Name of the Vulnerable Software and Affected Versions: Notepad++ versions 8.5.6 and prior Description: The issue is related to a global buffer read overflow in the CharDistributionAnalysis::HandleOneChar function. This may potentially be used to leak internal memory allocation information. The...

Notepad++ 安全漏洞

Notepad++ is an open source plain text editor by Don Ho, an individual developer in Taiwan, China. A security vulnerability exists in Notepad++ due to a global buffer read overflow vulnerability in the CharDistributionAnalysis::HandleOneChar function...

Exploit for Link Following in Microsoft

CVE-2023-36874 Windows Error Reporting LPE BOF Introductio...

Malicious code in website-frontend-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04f43ddaad758a9041c06daacb15db027a4552836ee0f59caa0b4762c87acdc6 The OpenSSF Package Analysis project identified 'website-frontend-cms' @ 99.99.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1571 Malicious code in gapps-automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fc1e430c7dfe87a465530b1e2067f640fda560b96555750466520fb727d8f19 The OpenSSF Package Analysis project identified 'gapps-automation' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1572 Malicious code in happa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f34c3c3c27c46dc70ca4b7ab3854f396ae790248623d6ac2f5078244ece0a73 The OpenSSF Package Analysis project identified 'happa' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2023-1569 Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1570 Malicious code in @dpdgroupuk/your-dpd-rest-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0b6ed54c73bb7b7cfbb33bfedad652cee9252913fd10dcc726d67cdea39f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1567 Malicious code in dexalot-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49e7d1e48c40c5dcc937fed7e2bf1fd9437a3886652c7fa4c6d14181cd5aca86 The OpenSSF Package Analysis project identified 'dexalot-docs' @ 3000.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dexalot-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49e7d1e48c40c5dcc937fed7e2bf1fd9437a3886652c7fa4c6d14181cd5aca86 The OpenSSF Package Analysis project identified 'dexalot-docs' @ 3000.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in hardhat-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3593917b9125465c1d3c5d6b38c62a9819d7590aea1522bdcf400ffef560a9b7 The OpenSSF Package Analysis project identified 'hardhat-contract' @ 15.0.0 npm as malicious. It is considered malicious because: - The package...