9072 matches found
CVE-2024-50228
In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix data-race in shmemgetattr I got the following KCSAN report during syzbot testing: ================================================================== BUG: KCSAN: data-race in genericfillattr / inodesetctimecurrent...
MAL-2024-10563 Malicious code in nfs-server-alpine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d66c21af0a19ac1a2dafd01239a6a61a590bdc133e53a71bd9527b2a2708d7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10564 Malicious code in octopus-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f2d9eb61053da88b3c1c9f3f9cda88f3974f897595acd8e1c42ebef0aec126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10568 Malicious code in poc-lelouch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5593904da4697f6d80bea8f6926ba9668d25c9ba34ba801115e347ffc19c719c The OpenSSF Package Analysis project identified 'poc-lelouch' @ 1.6.0 npm as malicious. It is considered malicious because: - The package execut...
MAL-2024-10567 Malicious code in plaidreactnativedemo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891b863e4d747888c84f2d3ea775aef863f28c96649614a6bc0be2d3480318e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10562 Malicious code in mongoose-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce219918a29ca5834b05f314d7600b12af0243a7e6036b1ed553fb0b41d9cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10570 Malicious code in spliffy-benchmark (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ead6b661fb169fc63b0a65eb514024ee59694c0b4e6031a27afc765d0089b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10558 Malicious code in dancer-pipeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d1f4c0f5ff76788a930b3387f90983f8ef4ae8e8b2064c4829e76954feee04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10566 Malicious code in pixiv-novel-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4e5119a339b3970c17507784181c47d0872a8f642804a5d5a1bd4182e381e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10572 Malicious code in xcasset-gen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10559 Malicious code in embrace-helloworld (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c1c70726566294b9958ec5ab9d3af0e2d5e1c3dc9451f07055c6b650bfbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10553 Malicious code in autolink-jira-issue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d899824dec6a9efaddf4482f495ca1b557fc0ec18d4371e0214c6397fd95ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2024-50185
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUGNET assertions, to avoid the splat on some builds and handle...
CVE-2024-50177 drm/amd/display: fix a UBSAN warning in DML2.1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, since cursorwidth is explicity set to 0, this causes calculation logic to trigger overflow for an unsigned int triggering the kernel's UBSAN check as...
MAL-2024-10557 Malicious code in com.immutable.orderbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f795b01833e389a9a9ebe458382a107659f9bcd99fc298823315bd263d617ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-35171
Name of the Vulnerable Software and Affected Versions Amazon Cognito affected versions not specified Description The issue allows previously authenticated users to continue executing authorized API requests until their authentication token expires, even after logging out. This is because...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an integer overflow problem when a UBSAN warning is triggered...
MAL-2024-10556 Malicious code in com.immutable.api.zkevm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abb9b0d7d0aaebe4c9072367919fa4d1ffdf77edb53d312432695954d05b599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10560 Malicious code in immutable-axelar-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...