Malicious code in nebula-kiwi-yri081-project (npm)

The package nebula-kiwi-yri081-project was found to contain malicious code...

CVE-2023-43687

An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. There is a Race condition that leads to code execution because of a lack of locks between file verification and execution...

CVE-2023-43692

An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. Out-of-bound reads in strings detection utilities lead to system crashes...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43683

An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. A Stack buffer out-of-bounds access exists because of an integer underflow when handling newline characters...

CVE-2023-43687

An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. There is a Race condition that leads to code execution because of a lack of locks between file verification and execution...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43692

An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. Out-of-bound reads in strings detection utilities lead to system crashes...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

PT-2025-33345 · Netbula +1 · Nebula +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions 4.6.14.326 through 5.1.5.116 Nebula versions 2020-10-21 and later Description: A stack buffer out-of-bounds access issue exists due to an integer underflow when handling newline characters. Recommendations: Update...

PT-2025-33346 · Netbula +1 · Nebula +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions prior to 4.6.14.326 Malwarebytes versions prior to 5.1.5.116 Nebula versions 2020-10-21 and later Description: An out-of-bounds read issue exists in the strings detection utilities, leading to system crashes...

CVE-2023-43683

CVE-2023-43683 affects Malwarebytes 4.6.14.326 and earlier, up to 5.1.5.116, and Nebula 2020-10-21 and later. Root cause is a stack buffer out-of-bounds access caused by an integer underflow when handling newline characters. The impact is a memory access issue in the stack buffer. Remediation: up...

CVE-2023-43692

CVE-2023-43692 affects Malwarebytes prior to 4.6.14.326 and prior to 5.1.5.116, as well as Nebula versions 2020-10-21 and later. The issue is an out-of-bounds read in the strings detection utilities, which can lead to system crashes. Root cause is a memory/bounds handling flaw in the strings dete...

CVE-2023-43694

CVE-2023-43694 affects Malwarebytes software and Nebula components. Affected: Malwarebytes 4.6.14.326 and earlier, and 5.1.5.116 and earlier; Nebula 2020-10-21 and later. Root cause: out-of-bounds reads in several disassembling utilities. Impact: stability issues and denial of service. Exploitati...

Friday Squid Blogging: The Giant Squid Nebula

Beautiful photo. Difficult to capture, this mysterious, squid-shaped interstellar cloud spans nearly three full moons in planet Earth's sky. Discovered in 2011 by French astro-imager Nicolas Outters, the Squid Nebula's bipolar shape is distinguished here by the telltale blue emission from doubly...

CVE-2022-46080

Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET...

CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

CVE-2025-2311 Authentication Bypass in Sechard Information Technologies' SecHard

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event...

Nebula Informatics SecHard 安全漏洞

Nebula Informatics SecHard is a multi-module software for implementing a zero-trust architecture from Nebula Informatics. A security vulnerability exists in versions prior to Nebula Informatics SecHard 3.3.0.20220411 that stems from improper use of privileged APIs, plaintext transfer of sensitive...

PT-2025-12330

Name of the Vulnerable Software and Affected Versions Nebula Informatics SecHard versions prior to 3.3.0.20220411 Description The issue is related to the incorrect use of privileged APIs, cleartext transmission of sensitive information, and insufficiently protected credentials. This allows for...