Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android...

Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Kernel components Kernel in Google Android. There is no information about this vulnerability yet, please stay tuned to CNNVD or the vendor's announcement...

MAL-2022-168 Malicious code in @chegg-me-components/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chegg-me-components/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @design-components/customer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-200 Malicious code in @design-components/customer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2666e2e1994e04e2770cc4ad18bf2c0538aaca1cf1b0889dcea405c50b632e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @chegg-me-components/header

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-6646 Malicious code in trezor-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in trezor-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in trezor-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

A nascent Linux-based botnet named Enemybot has expanded its capabilities to include recently disclosed security vulnerabilities in its arsenal to target web servers, Android devices, and content management systems CMS. "The malware is rapidly adopting one-day vulnerabilities as part of its...

[R3] Nessus Version 10.2.0 Fixes Multiple Vulnerabilities

R3 Nessus Version 10.2.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 05/26/2022 - 09:30 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components zlib, expat, jQuery UI were found to contain vulnerabilities, and updated versions hav...

com.googlecode.wicketelements:wicket-elements-components (>=1.4.9, <=1.4.10), com.googlecode.wicketelements:wicket-elements-library (>=1.4.9, <=1.4.10) +191 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.4)

org.apache.wicket:wicket-core MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicketelements:wicket-elements-components =1.4.9, =1.4.9, =1.4.9, =1.4.9, =1.4.9,...

com.googlecode.wicketelements:wicket-elements-components (1.4.8), com.googlecode.wicketelements:wicket-elements-library (1.4.8) +214 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.3)

org.apache.wicket:wicket-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicketelements:wicket-elements-components 1.4.8 -...

@trovo/components (>=5.0.2, <=5.3.0), @trovo/motion (>=5.0.2, <=6.0.0) +9 more potentially affected by CVE-2020-28277 via dset (1.0.1)

dset NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dset and may be impacted: - @trovo/components =5.0.2, =5.0.2, =5.0.0, =1.0.15, =1.1.4, =1.0.0, =2.2.0, =1.0.0, =0.0.1, =0.0.2, =0.0.11 Source cves: CVE-2020-28277 Source advisory:...

Magento 2 Community Edition RCE via Unsafe File Upload

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...

GHSA-RX4J-X3FH-9QWG Centreon Sensitive Data Exposure

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components...

Centreon Sensitive Data Exposure

In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components...

Home Assistant information disclosure vulnerability

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...