Malicious code in lego-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f68048b64d2f636d41c97edba1631e654e4141f21d4b318622cc529eb5197ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-565 Malicious code in lego-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f68048b64d2f636d41c97edba1631e654e4141f21d4b318622cc529eb5197ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lego's Bricklink steps on cross site scripting blocks

If you build it, they will come. In Legos case, they built it and certain security flaws meant someone could have taken it all apart. PCMag reports that flaws in Legos Bricklink service meant that it was open to potential data leakage or even account hijacking. Those flaws, now addressed,...

Fedora: Security Advisory for golang-github-acme-lego (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-acme-lego-4.4.0-7.fc36

Let's Encrypt client and ACME library written in Go...

Fedora: Security Advisory for golang-github-acme-lego (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Malicious code in lego-on-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90472e4dc8436fd8759d19950b5944551a4db5cf4cef7611fad80c4907da460a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4279 Malicious code in lego-on-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90472e4dc8436fd8759d19950b5944551a4db5cf4cef7611fad80c4907da460a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-theme-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed1163a265defab266f935c6874966bf2d592acf7637e7cd74281679e41418e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3290 Malicious code in gatsby-theme-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed1163a265defab266f935c6874966bf2d592acf7637e7cd74281679e41418e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4459 Malicious code in mailru-toolkit-lego-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad7f34dc30e8c7b2d7ac5ce792161ffaa94305473c6cbfc016f30ff1d89916b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailru-toolkit-lego-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad7f34dc30e8c7b2d7ac5ce792161ffaa94305473c6cbfc016f30ff1d89916b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-github-acme-lego (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3583-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3583-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could constru...

USN-3583-1: Linux kernel vulnerabilities

It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-0750 It...

lego.com XSS vulnerability

Vulnerable URL: https://www.lego.com/en-us/legal/Shared/Messages/XLink?initialPage=';confirmOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2607 VIP website status:...

LEGO® Juniors Create & Cruise - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® Juniors Create & Cruise published at the 'play' market has multiple vulnerabilities...

LEGO® City My City 2 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® City My City 2 published at the 'play' market has multiple vulnerabilities...

shop.lego.com XSS vulnerability

Vulnerable URL: https://shop.lego.com/en-US/Sales-And-Deals-Sets?S1='--...

search-es.lego.com XSS vulnerability

Vulnerable URL: http://search-es.lego.com/?cc=FR〈=1036=%22+onfocus%3D%22alert%27OPENBUGBOUNTY%27%22+autofocus%3D%22%22=1=0=0 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...