GHSA-9WXJ-37P8-49FF Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Trickbot module descriptions

Trickbot aka TrickLoader or Trickster, is a successor of the Dyre banking Trojan that was active from 2014 to 2016 and performed man-in-the-browser attacks in order to steal banking credentials. Trickbot was first discovered in October 2016. Just like Dyre, its main functionality was initially th...

SUSE: Security Advisory (SUSE-SU-2015:1445-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-11883

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

PT-2020-12917

Name of the Vulnerable Software and Affected Versions Divante vue-storefront-api versions 1.11.1 and earlier Divante storefront-api versions 1.0-rc.1 and earlier Description The issue arises from unexpected HTTP requests that lead to an exception, resulting in the disclosure of the error stack...

ZNC Elevation of Privilege and Arbitrary Code Execution Vulnerabilities

ZNC is a set of IRC proxies that allow users to log in to IRC servers from their workstations. A security vulnerability exists in the Modules.cpp file in versions of ZNC prior to 1.7.4-rc1. A remote attacker can exploit this vulnerability to elevate privileges and execute arbitrary code with the...

Malicious Package

commander-js is a malicious package designed to take advantage of users making a mistake when typing the name of a module to install. All versions of this package is considered malicious and must not be used. The package downloads a malicious file and executes the contents after installation...

CVE-2017-1000473: Improper Neutralization of Special Elements used in an OS Command

Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root...

Git OS Command Injection Vulnerability

Git is a free, open source distributed version control system developed by American software developer Linus Torvalds Linus Torvalds. A command injection vulnerability exists in the Git operating system. The vulnerability can be exploited to execute arbitrary operating system commands with the he...

SUSE-SU-2015:1445-1 Security update for busybox

-The following issues are fixed by this update: CVE-2014-9645: do not allow / in module names to avoid loading bad modules bnc914660...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2513-1)

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...

Ubuntu: Security Advisory (USN-2513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2513-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...