Malicious Package

Overview pdb-extensions is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

SUSE CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

SUSE CVE-2014-9807

The pdb coder in ImageMagick allows remote attackers to cause a denial of service double free via unspecified vectors...

SUSE CVE-2015-8902

The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted PDB file...

SUSE CVE-2016-7531

MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...

SUSE CVE-2016-7537

MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...

SUSE CVE-2017-12674

In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service...

MAL-2023-673 Malicious code in pdb-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa36f387540b9f211b5d8ba41dedb21e51c841fe4a792db8b63d07b7f82370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-672 Malicious code in pdb-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcae6376270cf9586731727aed3a60ef10126ec0fa41a3c3ec04da7169fef7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdb-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcae6376270cf9586731727aed3a60ef10126ec0fa41a3c3ec04da7169fef7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-671 Malicious code in pdb-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01d39a5912b29ddba1313f299abcf80c8aca983b9d61a8f6580726c7e1a6e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Upgrade fails due to /var partition filling.

ADC upgrade is failing due to /var folder filling. Checking the /var folder we notice that /var/partitions is taking up a lot of the space. Looking into this further we can see there are many .pdb files taking up space within directory/var/partitions//nscollectRRD...

Mageia: Security Advisory (MGASA-2020-0329)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RANSOMWARE: Ranzy Locker

On 25 October 2021, the FBI released a report documenting their findings about a ransomware variant known as Ranzy Locker. While Ranzy Locker has not been used as prolifically as Conti or Darkside, it does leverage some of the same old ransomware tricks to attack its victims. In conjunction with...

Ransomware in the CIS

Introduction These days, when speaking of cyberthreats, most people have in mind ransomware, specifically cryptomalware. In 2020–2021, with the outbreak of the pandemic and the emergence of several major cybercriminal groups Maze, REvil, Conti, DarkSide, Avaddon, an entire criminal ecosystem took...

PuppetDB -- SQL Injection

Puppet reports: Fixed an issue where someone with the ability to query PuppetDB could arbitrarily write, update, or delete data CVE-2021-27021 PDB-5138...

Shell Injection

radare2 is vulnerable to shell injection. An attacker may create a malicious PDB file in PDB server path to cause a shell injection...

MGASA-2020-0329 Updated radare2 packages fix security vulnerability

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...