Lucene search
+L

5657 matches found

Github Security Blog
Github Security Blog
•added 2024/06/27 2:26 a.m.•4 views

Malware in gradient-tiny

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/06/26 3:15 a.m.•48 views

CVE-2024-5181

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration file, which is used in the name of the initialized process. An attacker can exploit this vulnerability by...

9.8CVSS0.02685EPSS
SaveExploits1References2
CVE
CVE
•added 2024/06/26 2:53 a.m.•106 views

CVE-2024-5181

CVE-2024-5181 – mudler/localai (v2.14.0) : A command injection flaw arises from how the backend parameter in the configuration file is used to name the initialized process, enabling an attacker to manipulate the path of the vulnerable binary and execute arbitrary code. The issue stems from improp...

9.8CVSS8.5AI score0.02685EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/26 12:00 a.m.•8 views

CVE-2024-5181: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration file, which is used in the name of the initialized process. An attacker can exploit this vulnerability by...

9.8CVSS8.5AI score0.02685EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:06 p.m.•7 views

Malicious code in ufo-rocks2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:00 p.m.•4 views

Malicious code in signingroom-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3bb2b5cbc3013e79bdf785188fcc2460f21c6214fa59d6a57b5e3d8ed15b3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/06/24 1:57 a.m.•5 views

Malware in @elza/keepalive

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/20 12:36 a.m.•3 views

Malware in logoo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 6:50 a.m.•2 views

Malware in rb-accordion

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 6:50 a.m.•4 views

Malware in rb-payment-input

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 1:33 a.m.•3 views

Malware in logooo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 1:33 a.m.•4 views

Malware in detailimg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 1:33 a.m.•4 views

Malware in mediaa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/18 1:33 a.m.•4 views

Malware in logo-stylee

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/17 8:41 a.m.•3 views

Malware in pwnkunwar

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/17 8:32 a.m.•4 views

Malware in @corraldev/cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/17 8:32 a.m.•4 views

Malware in braintree-rpc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/17 8:25 a.m.•3 views

Malware in @yoimiiya/fetchs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/13 6:25 a.m.•4 views

Malware in djangosnippets.org

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/13 1:43 a.m.•5 views

Malware in dependences

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder