Malware in sf-intl-sn-prod

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in intl.walmart.cca.webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663678906f8c3cc94e69d26183d0757c295a9f04195749cd05c3260b980db1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 39 : php (2024-52c23ef1ec)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-52c23ef1ec advisory. PHP version 8.2.20 06 Jun 2024 CGI: Fixed buffer limit on Windows, replacing read call usage by read. David Carlier Fixed bug GHSA-3qgc-jrrr-25jv...

Fedora 40 : php (2024-49aba7b305)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-49aba7b305 advisory. PHP version 8.3.8 06 Jun 2024 CGI: Fixed buffer limit on Windows, replacing read call usage by read. David Carlier Fixed bug GHSA-3qgc-jrrr-25jv...

Mageia: Security Advisory (MGASA-2023-0270)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated glibc packages fix security and other bugs

getaddrinfo: Fix use after free in getcanonname CVE-2023-4806 Stack read overflow with large TCP responses in no-aaaa mode CVE-2023-4527 elf: Introduce to dlcallfini elf: Do not run constructors for proxy objects elf: Always call destructors in reverse constructor order BZ 30785 elf: Remove unuse...

Malicious code in react-intl-cdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afcb5984f676ea2bd3bfbbac709ca2328833be4441f0579e0ce29032a7d860e4 The OpenSSF Package Analysis project identified 'react-intl-cdo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1281 Malicious code in react-intl-cdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afcb5984f676ea2bd3bfbbac709ca2328833be4441f0579e0ce29032a7d860e4 The OpenSSF Package Analysis project identified 'react-intl-cdo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Debian DSA-5425-1 : php8.2 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5425 advisory. It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information leak or use...

Debian DSA-5424-1 : php7.4 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5424 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...

SUSE CVE-2011-1467

Unspecified vulnerability in the NumberFormatter::setSymbol aka numfmtsetsymbol function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via an invalid argument, a related issue to CVE-2010-4409...

CentOS 8 : php:8.0 (CESA-2022:7624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...

MGASA-2022-0362 Updated php packages fix security vulnerability

Core Fixed bug GH-9323 Crash in ZENDRETURN/GC/zendcallfunction Fixed bug GH-9361 Segmentation fault on script exit 9379. Fixed bug GH-9407 LSP error in eval'd code refers to wrong class for static type. Fixed bug 81727: Don't mangle HTTP variable names that clash with ones that have a specific...

CVE-2022-1638

CVE-2022-1638 is a Chromium/Google Chrome vulnerability: a heap buffer overflow in V8 Internationalization that can enable heap corruption via a crafted HTML page. The issue affects Chrome/Chromium builds prior to 101.0.4951.64 and is described as a remote-execution risk with high impact (C/H/I/A...

Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4928 Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview notion-intl is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in mitui-util-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aca9dab97c8d77e171a9e1ab72e7dc1dd029fa2be829a9b6288f44c573a8133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4630 Malicious code in mitui-util-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aca9dab97c8d77e171a9e1ab72e7dc1dd029fa2be829a9b6288f44c573a8133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2720 Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...