Malicious code in @huoshanjiebai/ethereumjs-utill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7a36fccca657e26ff9ded801631d537ad159e26045c0be4de99b31d351e20d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HTTP-Shell - MultiPlatform HTTP Reverse Shell

HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as possible to a...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to execute arbitrary commands.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the failure to take measures for data cleanup at the management level due to the use of an outdated version of the runshellscript command. Exploiting this vulnerability allows a remote...

PT-2023-24813 · Arm +1 · Arm +1

Name of the Vulnerable Software and Affected Versions: Arm affected versions not specified Description: The issue arises from the arithmetics in the cache cleaning and invalidation helpers provided by Arm, which can overflow and result in skipping the cache cleaning/invalidation. This means there...

IBM Sterling Secure Proxy Security Vulnerability

IBM Sterling Secure Proxy is an International Business Machines IBM application agent used to ensure the secure transfer of files in an organization's unprotected zone DMZ. A security vulnerability exists in IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0, which stems from an inadequate memory...

WordPress plugin File Sharing Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress plugin WooCommerce PDF Invoice Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plugin. WordPress plugin WooCommerce PDF...

WordPress plugin CHP Ads Block Detector 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Order Tracking Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin Order Tracking Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

libvirt: Memory leak in virPCIVirtualFunctionList cleanup

A vulnerability was found in libvirt. This security flaw occurs due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

libp2p nodes vulnerable to OOM attack

Summary In go-libp2p, by using signed peer records a malicious actor can store an arbitrary amount of data in a remote node’s memory. This memory does not get garbage collected and so the victim can run out of memory and crash. It is feasible to do this at scale. An attacker would have to transfe...

GHSA-GCQ9-QQWX-RGJ3 libp2p nodes vulnerable to OOM attack

Summary In go-libp2p, by using signed peer records a malicious actor can store an arbitrary amount of data in a remote node’s memory. This memory does not get garbage collected and so the victim can run out of memory and crash. It is feasible to do this at scale. An attacker would have to transfe...

Malicious code in funcraft-api-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26cfbee7915882a36f6b1213f8779104f879b89ffc82f599aeecde077717859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-4459

A NULL pointer dereference flaw was found in vmxnet3rqcleanup in drivers/net/vmxnet3/vmxnet3drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during...

DEBIAN-CVE-2023-4459

A NULL pointer dereference flaw was found in vmxnet3rqcleanup in drivers/net/vmxnet3/vmxnet3drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during...

Malicious code in urs-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d0470f35ccd55fb33289039a2265e1aae264f539cc0358f9f21b3557d5ec5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the syntax analyzer of the file system for Hierarchical File System Plus (HFS+) in ClamAV allows a perpetrator to trigger a service failure due to improper cleaning or release of resources.

The vulnerability of the syntax analyzer for the Hierarchical File System Plus HFS+ ClamAV is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted version of the HFS+ file system image...

The vulnerability of server software like HAProxy arises from incomplete cleanup of temporary or auxiliary resources, allowing attackers to gain access to confidential data.

The vulnerability of server software like HAProxy is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

SUSE CVE-2023-4387

A use-after-free flaw was found in vmxnet3rqallocrxbuf in drivers/net/vmxnet3/vmxnet3drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3rqcleanupall, which could also lead to ...