Mageia: Security Advisory (MGASA-2024-0396)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2024:0412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-12086 Malicious code in dynamodb-data-mapper-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...

NTP Timeroast

Windows authenticates NTP requests by calculating the message digest using the NT hash followed by the first 48 bytes of the NTP message all fields preceding the key ID. An attacker can abuse this to recover hashes that can be cracked offline for machine and trust accounts. The attacker must know...

MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

Nuclei-Template-CVE-2024-50379 Descripción Este template de...

MAL-2024-12030 Malicious code in rdjjfjooirpp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0def3cb04d3fb8c638daf6a97a708bd6b95632da63635563110d5827170cfff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12026 Malicious code in pushservicejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8875b705a6e055665ad1912b3f5aeca6578af2778e4b541e7061ae20d6ecbd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12024 Malicious code in private-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00733ed27d2b66f512559495dc079196948c176ea93c337042bed009427afc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12013 Malicious code in oj-odcs-category-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60a93d78df8a9fddce4544e346f4e972b8d22bc721038cc23b9461ffdd9dcad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12054 Malicious code in uid-2-test-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2900f53327b861bd4050d2e38c0e867e8ace72a97f5525cb74f56a7af8373e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12018 Malicious code in otc-echo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b0e38efe6cfc6243284d736f8569dc30c9f94b10388d60d4f0f323fbb84cf5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11962 Malicious code in csp-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c56da928c82cee1c2a2332c92447b99ae4d8fa17441e9391ac05a4f38d3323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12052 Malicious code in uflexreward-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a03cd0b643eecb9171dd74f66e1916442f16b25e64f6652fc489fda6e8fe19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12051 Malicious code in uflexreward-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6f3991bf23d78bbb66f584b408dc443c00d8dab5a6221ab255911e5c17d058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11957 Malicious code in component-detection-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612def523e2e2b3cd483831188b3e68f79f2575bc19954cc24088532608f7798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component-detection-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612def523e2e2b3cd483831188b3e68f79f2575bc19954cc24088532608f7798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11951 Malicious code in client-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b972deca5352be5ff4ad1c1ca8d1b1da5c8f7f124ff1202510ecc3136ab617b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-12819

creationtimestamp| type| source ---|---|--- 2024-12-19 07:43:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113678365633955131 2024-12-19 09:48:07+00:00| seen| https://t.me/cvedetector/13314 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...