Malicious code in elliptic-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f5aa19fd478d27d6a061c40dbabd597ef510b0bc122de0b4da84de18f478059 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-303 Malicious code in elliptic-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f5aa19fd478d27d6a061c40dbabd597ef510b0bc122de0b4da84de18f478059 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

Cross site scripting

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

PT-2023-24674 · Avo · Avo

Name of the Vulnerable Software and Affected Versions: Avo affected versions not specified Description: The issue concerns some Avo fields being vulnerable to Cross Site Scripting XSS when rendering HTML-based content. Attackers need form edit privilege to exploit this vulnerability, but the...

PT-2023-24334 · Minical · Minical

Name of the Vulnerable Software and Affected Versions: Minical version 1.0.0 Description: The issue is related to Cross Site Scripting XSS and is caused by insufficient input validation in the application's user input handling in the security helper.php file. Recommendations: For Minical version...

kernel: drm/fb-helper: Fix out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access in fbdev deferred I/O's damage handling. Fbdev's deferred I/O can only track pages. From the range of pages, the damage...

CVE-2023-21116

In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android, which stems from uncontrolled resource consumption in several functions of the SnoozeHelper.java file, and can be exploited by an attacker to elevate...

kernel: drm/fb-helper: Fix out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Fix out-of-bounds access Clip memory range to screen-buffer size to avoid out-of-bounds access in fbdev deferred I/O's damage handling. Fbdev's deferred I/O can only track pages. From the range of pages, the damage...

Malicious code in oj-form-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08640301c07abb7a71bc12fb8175161185cb6ac67e0118f9f0e05ec591d5f30e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-650 Malicious code in oj-form-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08640301c07abb7a71bc12fb8175161185cb6ac67e0118f9f0e05ec591d5f30e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-26147 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns an out-of-bounds access in the Linux kernel's drm/fb-helper. It occurs because fbdev's deferred I/O can only track pages, and when the fbdev screen buffer ends near...

[SECURITY] Fedora 38 Update: rust-cargo-c-0.9.12-4.fc38

Helper program to build and install c-like libraries...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

CVE-2023-30328

An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE in helper method dispatch, where it uses Kernel::send to call helpers without checking that they are defined within the template context first. This allows expressions such as system "ls" or eval "puts 1 + 1" t...

CVE-2023-21087

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

PT-2023-17880 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: An uncaught exception in PreferencesHelper.java may cause the device to get stuck in a boot loop, leading to local persistent denial of service with no additional execution privilege...