CVE-2024-38366

CVE-2024-38366 affects CocoaPods Trunk Server (trunk.cocoapods.org). The flaw stems from the email signup MX verification using an RFC-822 library which executes the host command to validate MX records, enabling remote code execution on the Trunk server. The underlying risk is that an attacker co...

CVE-2024-38366

trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. The part of trunk which verifies whether a user has a real email address on signup used a rfc-822 library which executes a shell command to validate the email domain MX records validity. It works via an DNS MX...

Malicious code in intercom-react-native.podspec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7abac0d25d94aaefe28f345fed96e1b39bc48cf2a461e080bc7932439219bfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...