CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

PT-2022-11326 · Unknown · Scaffold-Helper

Name of the Vulnerable Software and Affected Versions: scaffold-helper version 1.2.0 Description: A Regular Expression Denial of Service ReDOS issue was found in scaffold-helper when copying crafted invalid files. This occurs due to inefficient regular expression handling, which can lead to...

scaffold-helper 安全漏洞

scaffold-helper is able to copy files and folders from a source directory to a destination directory using template styles in template files. scaffold-helper version v1.2.0 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service when copying invalid...

Design/Logic Flaw

Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3 ImpactA possible XS...

Malicious Package

Overview dgse-tools-mgm-elf-helper is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

use ECDSA helper library instead of ecrecover

Lines of code Vulnerability details use ECDSA helper library instead of ecrecover the function permit adds approval for a spender for a certain amount of value use of ecrecover to validate signatures without a nonce will allow signatures to be replayed to add additional approvals due to signature...

MAL-2022-6144 Malicious code in skale-ima-owasp-helper-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018f739b731e235df0faf551ead854b13f12d875c77e8919dd85f7799917d65f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-owasp-helper-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018f739b731e235df0faf551ead854b13f12d875c77e8919dd85f7799917d65f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ozone-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6735a42b44af8f34dd1492af31a5132908fc06b3d6bd08d5eb28e11823e8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5168 Malicious code in ozone-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6735a42b44af8f34dd1492af31a5132908fc06b3d6bd08d5eb28e11823e8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5455 Malicious code in prettier-linter-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf65c73ec82ed02ba624f7a8fa6e4d28fd95214b1d4a56c82651d2279562433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-linter-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf65c73ec82ed02ba624f7a8fa6e4d28fd95214b1d4a56c82651d2279562433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-module-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778627c6fddd3213ecd51919302043e954a27431ff63b240135308cd3d9a6512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3606 Malicious code in helper-module-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778627c6fddd3213ecd51919302043e954a27431ff63b240135308cd3d9a6512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in turbine_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03473043e1461c98c39088b74026d40f332cf62a6e22531d1eefe2e4d6c7aa5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6681 Malicious code in turbine_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03473043e1461c98c39088b74026d40f332cf62a6e22531d1eefe2e4d6c7aa5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac04aef85013d9a618d3cdea01e11cc1bcdaaa2a5a49181947e3133c124b22e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2016 Malicious code in colors-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac04aef85013d9a618d3cdea01e11cc1bcdaaa2a5a49181947e3133c124b22e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20193

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for...

Design/Logic Flaw

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...