MAL-2024-10338 Malicious code in pupeteerextra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e80a4a5c8c56739a14b54aadce221ed5c807267e78ac7fbda47460d3482d9bd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-50354

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory...

Exploit for CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability ---------------------------...

Yealink Meeting Server 安全漏洞

Yealink YeaLink Meeting Server is a distributed cloud video conferencing infrastructure from China Yealink Yealink. A security vulnerability exists in Yealink Meeting Server versions prior to V26.0.0.67, which originates from allowing an attacker to obtain static key information from a front-end ...

CVE-2024-50354

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory...

CVE-2024-50354 Out-of-memory during deserialization with crafted inputs

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory...

CVE-2024-50354 Out-of-memory during deserialization with crafted inputs

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory...

MAL-2024-10303 Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10302 Malicious code in freshchange (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef4af44ca82b1bcc59591f04f573a67cdbb3de08f662fe614ab84b9b2bf443e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-34163

Name of the Vulnerable Software and Affected Versions: gnark versions 0.11.0 and earlier Description: The issue is related to excessive memory allocation during the deserialization of Groth16 verification keys in gnark, leading to a denial of service DoS. This can cause the program to crash with ...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed to steal sensitive data and drain assets from victims' crypto wallets. The package, named "CryptoAITools," is said to have been distributed...

MAL-2024-10279 Malicious code in req-scopes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff2585aad680d6ab6cfae142ed9f4aeac20d060968138d851b5daabe766969f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10276 Malicious code in princedevmd1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5e6c2e25296a36f3923783f37ad2d8bc6e4ee785afcd14f29978aecbd8e54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10275 Malicious code in lessc-rhino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2f2e650cb07c9f3679ece96f6b976f18f9a931750b93c824d3701667ab33bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10277 Malicious code in react-native-blue-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25cdf24ea56c6768c56579fca642bb9bf9510233ad5c87f48f9ec0cfc336c8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10260 Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10261 Malicious code in gerhtreger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f134193ba18cdd700a042bf6b6fca2d3b9475dea7731883fdce08b9d816eb25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10262 Malicious code in herthtrhrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d290b1abea443c12835d59d67a6cb023281325c39123663ccd29e66d3944d6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6674 Data Leak through CORS Misconfiguration in parisneo/lollms-webui

A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability can also enable attackers to perform actions on behalf of a user,...