MAL-2025-6796 Malicious code in lynx-libs-mono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in lynx-libs-mono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

[SECURITY] Fedora 41 Update: wine-mono-10.1.0-1.fc41

Windows Mono library required for Wine...

Fedora 41 : wine / wine-mono (2025-37c3017f45)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-37c3017f45 advisory. wine - Update to v10.12. - Drop unneeded libOSMesa dependency. wine-mono - Update to v10.1.0. Tenable has extracted the preceding description block directly...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A buffer error vulnerability exists in SWFTools version 0.9.2 and earlier, which stems from an out-of-bounds read in the file lib/wav.c function wavconvert2mono in the compone...

CVE-2023-26314

The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter...

Security update for libva

This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: CVE-2023-39929: Uncontrolled search path may allow an authenticated user to escalate privilege via local access bsc1224413, jscPED-11066 This includes latest version of one of the...

The vulnerability of the cross-platform web service infrastructure platform Mono ServiceStack, related to improper verification of the cryptographic signature of data, allows attackers to bypass the signature verification and gain access to protected information.

The vulnerability of the cross-platform web service infrastructure of Mono ServiceStack is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability allows a malicious actor to bypass signature checks and gain access to protected information...

Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12085 Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10927

A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown function of the file /monofiles/account.php of the component Account Information Page. The manipulation of the argument userid leads to cross site scripting. It is possible to launch...

Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure Vulnerability

Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver. 4.00...

Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure

Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver. 4.00...

Malicious code in mono-debug (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2671 Malicious code in mono-debug (npm)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:10260-1 apache2-mod_mono-3.12-1.7 on GA media

These are all security issues fixed in the apache2-modmono-3.12-1.7 package on the GA media of openSUSE Tumbleweed...

ThievingFox - Remotely Retrieving Credentials From Password Managers And Windows Utilities

ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and windows utilities. Each module leverages a specific method of injecting into the target process, and then hooks internals functions to gather crendentials. The accompanying blog post ca...

Elber Wayber Analog/Digital Audio STL 4.00 Insecure Direct Object Reference Vulnerability

Elber Wayber Analog/Digital Audio STL version 4.00 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Wayber Analog/Digital Audio STL 4.00 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Dec-2023 Release 1, which stems from a heap out-of-bounds write vulnerability in...

dotnet8.0 security update

8.0.100-2.0.1 - Update to .NET 8.0 8.0.100rc.2-0.1.0.1 - Add support for Oracle Linux 8.0.100rc.2-0.1 - Update to .NET 8 RC 2 - Resolves: RHEL-13790 8.0.100rc.1-0.4 - Disable bootstrap - Related: RHEL-4074 8.0.100rc.1-0.3 - Add backported patches for additional s390x issues - Related: RHEL-4074...