Apache Atlas 路径遍历漏洞

Apache Atlas is a scalable and extensible set of core functional governance services from the Apache Foundation.Apache Atlas versions 0.8.4 through 2.2.0 have a path traversal vulnerability that stems from improper input validation in the import module, which could be exploited by an authenticate...

Security Bulletin: Atlas Suite and potential Apache Xerces-J XML parser Denial of Service attack (CVE-2013-4002)

Abstract Potential denial of service attack against Atlas Suite due to usage of the XML parser Apache Xerces-J. Content VULNERABILITY DETAILS: DESCRIPTION: The Apache Xerces-J XML parser is vulnerable to a denial of service attack, triggered by malformed XML data. The malformed data causes the XM...

Fedora: Security Advisory for golang-ariga-atlas (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-ariga-atlas-0.3.6-4.fc36

A database toolkit...

Microsoft Office Most Exploited Software in Malware Attacks – Report

By Deeba Ahmed Research reveals that around 80% of all malware attacks used MS Office flaws. Atlas VPN has shared its… This is a post from HackRead.com Read the original post: Microsoft Office Most Exploited Software in Malware Attacks - Report...

Fedora: Security Advisory for golang-ariga-atlas (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-ariga-atlas-0.3.6-3.fc35

A database toolkit...

Fedora: Security Advisory for golang-ariga-atlas (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-ariga-atlas-0.3.6-3.fc36

A database toolkit...

Malicious Package

Overview @atlas-angular/logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in @atlas-angular/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5388aefd4e4c621b09ab66dd4a1f6ddc6f43c2e148ed66c5aca46d18a4cc07d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlas-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1159 Malicious code in atlas-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6817 Malicious code in upwork-atlas-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef31b105d745aff3f04709c1ee435b5930984fc9925c235afc43c747d1e15c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upwork-atlas-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef31b105d745aff3f04709c1ee435b5930984fc9925c235afc43c747d1e15c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @atlasmonorepo/atlas-custom-behaviour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241e90046a2f4135dcc138d96ad982737c720bd59ec8eaabec8140551267660b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-88 Malicious code in @atlasmonorepo/atlas-shared-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef81513c438a2466eacb829841d4bc01f3fea58393d3246f2ebb6c5ce7469ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-86 Malicious code in @atlasmonorepo/atlas-base-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a46d56a7abeecc8a59cf19d8b7b2cd8fc4f78c673e174fd24607258f57b2a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @atlasmonorepo/atlas-shared-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef81513c438a2466eacb829841d4bc01f3fea58393d3246f2ebb6c5ce7469ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @atlasmonorepo/atlas-base-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a46d56a7abeecc8a59cf19d8b7b2cd8fc4f78c673e174fd24607258f57b2a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...