Lamassu Bitcoin ATM Douro Security Breach

Lamassu Bitcoin ATM Douro is a Bitcoin ATM from Lamassu. A security vulnerability exists in the Lamassu Bitcoin ATM Douro version 7.1 that stems from allowing the use of weak passwords. An attacker could exploit the vulnerability to retrieve stored hashes from the machine and crack passwords up t...

MachineSense FeverWarn Access Control Error Vulnerability

MachineSense FeverWarn is a temperature detection device from MachineSense. MachineSense FeverWarn suffers from an access control error vulnerability. An attacker could exploit the vulnerability to view source code, secret credentials, and more...

TemporAI Code Issue Vulnerability

TemporAI is a machine learning-centered medical time series library open-sourced by vanderSchaar LAB. A code issue vulnerability exists in vanderSchaar LAB TemporAI version 0.0.3, which stems from an incorrect operation that can lead to deserialization...

kernel: SEV-ES local priv escalation

A buffer overflow and null pointer dereference flaw was found in the Linux kernel's Secure Encrypted Virtualization SEV implementation for AMD functionality. This issue occurs when a user in SEV guest VM accesses MMIO registers, which could allow a local user to crash the system or escalate their...

kernel: SEV-ES local priv escalation

A buffer overflow and null pointer dereference flaw was found in the Linux kernel's Secure Encrypted Virtualization SEV implementation for AMD functionality. This issue occurs when a user in SEV guest VM accesses MMIO registers, which could allow a local user to crash the system or escalate their...

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 6 (5.4.4-150)

This update provides stability and performance improvements. Vulnerability id: VSTOR-79658, VSTOR-80254 Reworked eligibility checks for third-party packages. Vulnerability id: VSTOR-79881 For S3 objects uploaded by using multipart upload, replacing one object with another with the same name may...

Malicious code in wlwz-2312-6901 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93c4ad44423942b435de63caf1ec77479ccf4e253b0942a59f0c6fcca3d8a5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5503 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f541391fe869491840ea7b1859e1bf016380f26a7d586b45c96f5bbabcba79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e46092997b47ebc6f98019c4cef41b36cf29e0fcaaf45958cbfe97fb0042204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1702 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 921c48bc0256d191ef596f8241ffc86ec9742b3fd78ac197f08a6d7d12cf4a4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1507 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e59358cb28ffae294a0c12bc19cba69d1e1d3d6b926f0f3c415371efd4724b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3aeb031e9e9d9f91f64a1eb64be2c4a49362f64eff9307718007e80e129b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad08bf3c55dcea23a2af12839548d2b9d3a793c2b3bc78b054c6e9d72eca363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Xen Code Issues Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that...

Traceroute 2.1.2 Privilege Escalation Vulnerability

In Traceroute versions 2.0.12 through to 2.1.2, the wrapper scripts mishandle shell metacharacters, which can lead to privilege escalation if the wrapper scripts are executed via sudo. The affected wrapper scripts include tcptraceroute, tracepath, traceproto, and traceroute-nanog. Version 2.1.3...

Support for machine profile in VMware

This article describes theSupport for machine profile feature in VMwareenvironments...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...

`cosmwasm` is unmaintained

The crate cosmwasm is not used anymore since spring 2020. The functionality was split in multiple different crates, such as the standard library cosmwasm-std and the virtual machine cosmwasm-vm. An overview can be found in the cosmwasm repository. If you have this crate in your dependency tree,...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, or delete data...

CVE-2024-22419

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...