Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Build all python bindings for all flavors Fixed the condition of alternatives for Tumbleweed and Leap 16 Handle logger exception when flushing already closed file Included passlib as a recommended dependency Make minion reconnecting on changing master...

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

Improper Output Neutralization for Logs

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

UBUNTU-CVE-2025-25184

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious conten...

Prototype Pollution

eazy-logger is vulnerable to prototype pollution. The vulnerability is due to prototype pollution caused by the lib.Logger function allowing attackers to supply a crafted payload, leading to a Denial of Service DoS...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

GHSA-R7JX-5M6M-CPG9 eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Prototype Pollution

Overview org.webjars.npm:eazy-logger is a Simple cli logger Affected versions of this package are vulnerable to Prototype Pollution in the Logger function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...

CVE-2024-4190

Stored Cross-Site Scripting XSS vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

eazy-logger 安全漏洞

eazy-logger is a simple cli logger by Shane Osbourne Personal Developer. A security vulnerability exists in eazy-logger version v4.0.1, which stems from the lib.Logger function containing a prototype contamination vulnerability...

CVE-2024-57075

CVE-2024-57075 affects eazy-logger v4.0.1: prototype pollution in the lib.Logger function can load a crafted payload to modify Object.prototype, enabling denial of service (DoS). Public docs include a PoC that injects into the global prototype chain (e.g., via proto ), with outcomes ranging from ...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-818 Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

Malicious code in meli-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 323ab06bc2e65542017ab341bb31cbb5163ad6ed63cf9259878b1a7c2c9fc000 The OpenSSF Package Analysis project identified 'meli-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...