Insufficient Entropy

Overview Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure when hex encoding and trimming are applied, leaving half of the bit...

Malicious code in ykeykey-getkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1101a84c1f5eed9f8e7f5a95f7f534fb34d802e2a6384b024e2308307718c107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7352 Malicious code in ykeykey-getkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1101a84c1f5eed9f8e7f5a95f7f534fb34d802e2a6384b024e2308307718c107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ZeroShell 1.0beta11 - Remote Code Execution

ZeroShell 1.0beta11 - Remote Code Execution ==================================================== ZeroShell ;%22 In addition to the Unix commands, it is possible to abuse the ZeroShell scripts themself. For instance it is likely to use the "getkey" script in order to retrieve remote files, includi...