20660 matches found
Malicious code in repository-dispatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6945fe41e15be899900e8df18381144d95f14a8645f686d9b4c96f755e46f8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-43784
lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have issued credentials to users who have been deleted are affected by this vulnerability. When creating a new user with the same username as a deleted user, that user will inherit a...
CVE-2024-11745
creationtimestamp| type| source ---|---|--- 2024-11-26 21:00:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113551268785425413 2026-07-10 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqcyu4v5tp27...
CVE-2024-43784
CVE-2024-43784 affects lakeFS: when creating a new user with a username that previously belonged to a deleted user, the new user inherits all of the deleted user’s credentials. This is fixed in lakeFS release v1.33.0 and later. Affected users should upgrade to ≥1.33.0; if upgrading is not possibl...
Artifact poisoning vulnerability in action-download-artifact v5 and earlier
Summary In versions of dawidd6/action-download-artifact before v6, a repository's forks were also searched by default when attempting to find matching artifacts. This could be exploited by an unprivileged attacker to introduce compromised artifacts such as malicious executables into a privileged...
AZL-53652 CVE-2024-10220 affecting package kubernetes for versions less than 1.28.4-14
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2...
UBUNTU-CVE-2024-10220
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2...
SUSE CVE-2024-8986
The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running git remote get-url origin. If credentials are included in the repository URI for instance, to allow for fetching of private...
Kubernetes 安全漏洞
Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from Kubernetes Open Source. A security vulnerability exists in Kubernetes that stems from allowing arbitrary commands to be executed via a specially crafted gitRepo volume...
Exploit for OS Command Injection in Paloaltonetworks Pan-Os
CVE-2024-9474 PoC for Palo Alto PAN-OS vuln...
osbuild-composer security update
118-2.0.1 - Simplify repository names JIRA: OLDIS-35893 118-2 - Ensure build on latest golang: CVE-2024-34156...
CVE-2024-52583 WesHacks code includes links to Leostop tracking spyware infested files
The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page schedule.html before 17 November 2024 or commit 93dfb83 contains links to Leostop, a site that hosts a malicious injected JavaScript file that occurs when...
SUSE-SU-2024:4010-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency bsc1213933 - Other changes and issues fixed: Delete unpackaged debug files for RHEL Do not include source files in the package for RHEL 9...
Medium: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6sendskb CVE-2024-44987 In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmciresourceremove CVE-2024-46738 In the Linux...
MAL-2024-11693 Malicious code in reverse4343 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a90c21a3dc6b4091f1ccd6f17c99b1ec955954d2b78e93029e63c33f12ed3c7d The package contains only a reverse shell started on installation --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
CVE-2024-5082
A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...
CVE-2024-5082 Nexus Repository 2 - Remote Code Execution
A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...
CVE-2024-5082
CVE-2024-5082 corresponds to a Remote Code Execution issue in Sonatype Nexus Repository 2 (OSS/Pro) up to version 2.15.1 . The connected Nuclei template documents a Remote Code Execution vulnerability affecting Nexus Repository 2 before patch, with the impact described as attackers being able to ...
CVE-2024-5082 Nexus Repository 2 - Remote Code Execution
A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...
