Malware in sails-mssql-adapter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

org.apache.pulsar:pulsar-io-debezium-core (2.11.0), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.0) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.0 -...

org.apache.pulsar:pulsar-io-debezium-core (2.9.0), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.0) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.0 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.4 -...

org.apache.pulsar:pulsar-io-debezium-core (2.9.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.5) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.2), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.2) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.2 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.0), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.0) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.0 -...

org.apache.pulsar:pulsar-io-debezium-core (2.9.3), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.3) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.3)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.3 -...

org.apache.pulsar:pulsar-io-debezium-core (>=2.4.0, <=2.11.4), org.apache.pulsar:pulsar-io-debezium-mongodb (>=2.5.0, <=2.11.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (>=2.4.0, <=2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version =2.4.0, =2.4.0, =2.5.0, =2.9.0, =2.4.0, =2.9.0, =2.4.0, =2.8.0, =2.11.4 Source cves: CVE-2025-30677 Source advisory: SNYK:JAVA-ORGAPACHEPULSAR-9685317...

org.apache.pulsar:pulsar-io-debezium-core (2.11.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.2), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.2) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.2 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.6), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.6) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.6)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.6 -...

org.apache.pulsar:pulsar-io-debezium-core (2.9.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.3), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.3) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.3)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.3 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.2.0-26.1), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.1.5) +21 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-admin-ui (>=26.0.0, <=26.1.5)

org.keycloak:keycloak-admin-ui MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.0.0, =26.0.0, =26.1.5 and more Source cves: CVE-2024-4028 Source...

com.ververica:flink-connector-sqlserver-cdc (>=2.4.0, <=3.0.1), io.cdap.delta:sqlserver-delta-plugins (0.10.0) +2 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.9.7.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - com.ververica:flink-connector-sqlserver-cdc =2.4.0, =0.1.0,...

com.ascentstream.pulsar:pulsar-io-debezium-mssql (>=2.10.6.9, <=2.10.7.4), io.streamnative:pulsar-io-debezium-mssql (>=2.10.0.0-rc2, <=2.11.4.3-22cb86) +1 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.7.2.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.7.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - com.ascentstream.pulsar:pulsar-io-debezium-mssql =2.10.6.9, =2.10.0.0-rc2...

io.streamnative:pulsar-io-debezium-mssql (>=2.9.1.1, <=2.10.0-rc-2021121511380612), org.apache.camel.springboot:camel-debezium-sqlserver-starter (>=3.14.0, <=3.14.10) +7 more potentially affected by CVE-2023-1419 via io.debezium:debezium-connector-sqlserver (1.7.1.final)

io.debezium:debezium-connector-sqlserver MAVEN version 1.7.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.debezium:debezium-connector-sqlserver and may be impacted: - io.streamnative:pulsar-io-debezium-mssql =2.9.1.1, =3.14.0, =3.14.0,...

Microsoft SQL Server SUSER_SNAME Windows Domain Account Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft SQL Server SUSERSNAME Windows Domain Account Enumeration', 'Description' = %q This module can be used to bruteforce RIDs associated wit...