Malicious code in citra-empal73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b025b9fe767a9c41b17d8606b998001dfc15a1e24f1c66c9bd10f3bf6cb88e The package citra-empal73-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in erick-lumpur8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4908ea6b08b98ee00801f68932f9bc8ca5fbfc3440cd350942f0a8357d9bd5 The package erick-lumpur8-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in bella-rangginang22-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9c7eca63b7416cbf4d8964a18161fd299ed8666db4274f7c219f3e5472a3d2 The package bella-rangginang22-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2011-0486

Malware in sbrugna...

EUVD-2017-6295

Malware in sbrugna...

EUVD-2018-19405

Malware in sbrugna...

EUVD-2020-18739

Malware in sbrugna...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

SUSE CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

GHSA-8823-XPHR-QW9V Gentoo Portage does not verify X.509 certificates from SSL servers

The urlopen function in pym/portage/util/urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate...

cPanel Protection Mechanism Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A protection mechanism bypass vulnerability exists in versions of cPanel prior to 88.0.13. An attacker can exploit this vulnerability to bypass the protection mechanism that restricts package modifications...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

Authentication flaw

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

CVE-2020-26109 affects cPanel prior to version 88.0.13, where a protection mechanism intended to restrict package modification can be bypassed (SEC-557). The public documents consistently describe a bypass vulnerability enabling modification of packages despite the protection. Affected product: c...

CVE-2020-26109: Undefined Security Weakness

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

PT-2020-16292

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows bypass of a protection mechanism that attempted to restrict package modification. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the...

CVE-2017-14806

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...

CVE-2017-14806: Improper Certificate Validation

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...