PT-2025-10116 · Unknown · Msgspec-Python313-Pre +1

Name of the Vulnerable Software and Affected Versions: Python JSON Logger versions 3.2.0 through 3.2.1 Description: The issue is related to a missing dependency in the Python JSON Logger library, which could allow an attacker to execute arbitrary code on affected systems. This occurred because th...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494b67ee4a1ffa04c2e6b126d812416edad6a465015538873d2ecbddd18ee84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10802 Malicious code in seller-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494b67ee4a1ffa04c2e6b126d812416edad6a465015538873d2ecbddd18ee84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ai.optfor:spring-openai-api (>=0.1.3 <=0.3.25), ai.timefold.solver:timefold-solver-spring-boot-autoconfigure (>=1.0.0 <=1.4.0) +7541 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (>=6.0.0 <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =1.0.0, =1.0.0, =0.1.6, =0.0.2, =0.0.6, =0.0.6, =1.3.0, =4.6.18, =4.0.0, =1.0.0, =2.1.0.RELEASE, =2.1.2.RELEASE and more Source cves: CVE-2024-38820 Source advisory: OSV:GHSA-4GC7-5J7H-4QPH...

Malicious code in utils.logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in env-debug-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9596 Malicious code in env-debug-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in djs14-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9586 Malicious code in djs14-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nf-cl-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a07e531cde3becef826740710d90cfb37d46917ae9a633d794a641b4f04c737 The OpenSSF Package Analysis project identified 'nf-cl-logger' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9066 Malicious code in nf-cl-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a07e531cde3becef826740710d90cfb37d46917ae9a633d794a641b4f04c737 The OpenSSF Package Analysis project identified 'nf-cl-logger' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable()

An out-of-bounds access vulnerability was found in the Linux Kernel. This issue occurs during the creation of a new netfilter table. The absence of safeguards in the nftablesnewtable function against invalid nftables family pf values allows attackers to achieve unauthorized access. Exploitation...

Malicious code in bby-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 746efea78f0fad1fcf28d697e7f458ab59c43a6f5442e8088d91a83474bc0c20 The OpenSSF Package Analysis project identified 'bby-node-logger' @ 4.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8888 Malicious code in bby-node-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 746efea78f0fad1fcf28d697e7f458ab59c43a6f5442e8088d91a83474bc0c20 The OpenSSF Package Analysis project identified 'bby-node-logger' @ 4.2.2 npm as malicious. It is considered malicious because: - The package...

PT-2024-40570 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash caused by a bad-cast in the Assimp library. Specifically, it involves a bad-cast to Assimp::LogStream from an invalid vptr, occurring in the...

Malicious code in @benasin_2/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a339db60313e6c81672ce35a4c91e4a1c202c1a62cb5fff73c5a59c8fc9347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8027 Malicious code in @benasin_2/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a339db60313e6c81672ce35a4c91e4a1c202c1a62cb5fff73c5a59c8fc9347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in benasin_logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8976a88d4fd270667bd1f7789de62b7f119041d63970f7c0a04c1ad1437c213f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rapyd-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aede90914832dcbbcef8387f409b8b95349a15e7846fe789f70e90b6663fb8b9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...