14 matches found
com.github.pukkaone:logback-gelf (>=1.1.5, <=1.1.9), com.globo.graylog2:gelfj (>=1.1.16.0, <=1.1.16.1) +13 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.0.4)
com.rabbitmq:amqp-client MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.pukkaone:logback-gelf =1.1.5, =1.1.16.0, =2.0.0, =1.1.3, =1.2, =1.2, =1.5 Source cves: CVE-2026-1061...
agentstack-cli (>=0.5.0rc4, <=0.6.1), artifact-ddd (>=0.0.1, <=0.0.3) +144 more potentially affected by CVE-2026-26007 via cryptography (>=46.0.0, <=46.0.4)
cryptography PYPI version =46.0.0, =0.5.0rc4, =0.0.1, =0.13.12, =3.8.9, =0.2.50, =0.7.0, =3.0.0a1, =0.4.6, =1.1.56, =1.0.3, =4.7.0, =1.28.0rc1, =1.29.0 and more Source cves: CVE-2026-26007 Source advisory: GHSA-R6PH-V2QM-Q3C2...
This Week in Spring - July 26th, 2022
Aloha, Spring fans! Im on vacation, reporting to you from the paradise-like island of Maui, Hawaii, and hoping that youre having a wonderful day! My family and I love Hawaii. Its brimming with beauty and serenity, and while the island of Maui, in the state of Hawaii, is very small, the islands ar...
Malicious code in ddd-demo3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eac035e89513982d440328e69c5d811c0540172b7b17a393a37b67685b57784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2381 Malicious code in ddd-demo3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eac035e89513982d440328e69c5d811c0540172b7b17a393a37b67685b57784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ddd-demo2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ab8af553dfe0dea6ad77bf720bc5c510a823dcc00efc0a19f6d7cec226ff1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ddd-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8f62ef9b886f760d717d97048fb305e00ee0d808ba286afabde024398a2159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2379 Malicious code in ddd-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8f62ef9b886f760d717d97048fb305e00ee0d808ba286afabde024398a2159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-27171
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...
PT-2021-17290
Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, allowing an attacker to start a Linux telnetd as root on port 26/tcp. This can be achieved by using the CLI interface commands ddd an...
CVE-2002-2099
Buffer overflow in the GNU DataDisplay Debugger DDD 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE...
CVE-2002-2099
The entry concerns CVE-2002-2099 affecting the GNU DataDisplay Debugger (DDD) 3.3.1. The vulnerability is a buffer overflow triggered by a long HOME environment variable, allowing a local user to execute arbitrary code and possibly gain privileges. The root cause is an overflow in DDD’s handling ...
CVE-2002-2099: Undefined Security Weakness
Buffer overflow in the GNU DataDisplay Debugger DDD 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE...
Linux news 4.12.00
Ядро 2.4.0-test12-pre4 Linus выпустил очередное pre ядро следующего тестового 2.4.0. В нем он добавил патчи от Alan'а Cox'a, включил патч от Stephen Tweedie, исправляющий ошибки в инодах и наложил еще несколько патчей от различных разработчиков ... Подробнее: http://www.kernel.org OpenBSD 2.8 is...