GHSA-CH7V-37XG-75PH vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-H828-V5PV-33QX vulnerabilities

Vulnerabilities for packages: juicefs...

Guest-controlled out-of-bounds read/write on x86\_64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-ff4p-7xrq-q5r8. For more information see the GitHub-hosted security advisory...

GHSA-Q2JF-H9JM-M7P4

creationtimestamp| type| source ---|---|--- 2023-03-01 11:31:30+00:00| seen| https://t.me/canyoupwnme/6855...

Malicious code in discord.js-hakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5488203f0727b63f8b3eb9250adce4794c1e1b02337ff5708538666a8a1aca6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-MC8H-8Q98-G5HR vulnerabilities

Vulnerabilities for packages: cbindgen, zellij...

Nextcloud Server < 23.0.12, 24.x < 24.0.8, 25.x < 25.0.2 Path Traversal Vulnerability (GHSA-273v-9h7x-p68v)

Nextcloud Server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GHSA-87X9-7GRX-M28V vulnerabilities

Vulnerabilities for packages: zot...

Python < 3.7.17, 3.8.x < 3.8.17, 3.9.x < 3.9.17, 3.10.x < 3.10.12, 3.11.x < 3.11.4 RCE Vulnerability - Mac OS X

Python is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow, restic, hey, wireguard-go, grpcurl, k3d, gke-gcloud-auth-plugin, go, terraform-provider-sendgrid, kubeflow-katib...

GHSA-259W-8HF6-59C2 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-259W-8HF6-59C2 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-HMFX-3PCX-653P vulnerabilities

Vulnerabilities for packages: ctop...

Nextcloud Server < 23.0.12, 24.x < 24.0.8, 25.x < 25.0.1 Improper Access Control (GHSA-492h-596q-xr2f)

Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MAL-2023-410 Malicious code in fca-jiserdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37c7c1daa39954ff43ad664a7222262a14f5fcf5e1ad3cb95db96957c750ccb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system

Impact This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with GHSA-p8r3-83r8-jwj5 to overwrite files on the host system. In order to use this...

Malicious code in @superbet-group/web.lib.utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab50162238435411f24dc3fc8561c82b1104a4caec2bc9878378e56f77ab46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-64 Malicious code in @superbet-group/web.lib.utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab50162238435411f24dc3fc8561c82b1104a4caec2bc9878378e56f77ab46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-25168

CVE-2023-25168 affects Pterodactyl Wings (server control plane). Description: UNIX Symbolic Link (Symlink) Following enables deletion of files/directories on the host when a server is allocated; may be used with GHSA-p8r3-83r8-jwj5 to overwrite host files. Root cause: symbolic link handling in Wi...

CVE-2023-25168 Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with GHSA-p8r3-83r8-jwj5 to overwrite files on the host system. In order to use this exploit, an attacker must have an...