MAL-2024-11309 Malicious code in b2bneo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11307 Malicious code in autoball (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11306 Malicious code in asdasssd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11299 Malicious code in apc-publish (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11297 Malicious code in antibyfron (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11296 Malicious code in another-query-parser (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11288 Malicious code in ac-analytics (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11285 Malicious code in @wf-wfmfe/sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11278 Malicious code in @rambler-help/shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11273 Malicious code in @leseo/book-viewer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11269 Malicious code in @iherb-payment/pages (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11261 Malicious code in @cawraytestorg/packagetest (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11257 Malicious code in @aws-sdk-examples/libs (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-4375

creationtimestamp| type| source ---|---|--- 2024-12-05 13:56:09+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-4375.yaml...

GO-2024-3304 Moby Race Condition vulnerability in github.com/moby/moby

Moby Race Condition vulnerability in github.com/moby/moby...

Missing Authentication for Critical Function

Overview matrix-synapse is an ecosystem for open federated Instant Messaging and VoIP. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the unauthenticated writes to the media repository. An attacker can plant problematic content into the med...

GHSA-GJGR-7834-RHXR Synapse's unauthenticated writes to the media repository allow planting of problematic content

Impact Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the local homeserver in an unauthenticate...

Synapse's unauthenticated writes to the media repository allow planting of problematic content

Impact Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the local homeserver in an unauthenticate...

DEBIAN-CVE-2024-37303

Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the...

CVE-2024-37303 Synapse unauthenticated writes to the media repository allow planting of problematic content

Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the...