MAL-2024-11746 Malicious code in voto3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 34f516638c010eaffd4b7bf199d71925e9963e438cd619739347a6d0ac4bb6be Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11556 Malicious code in check-codeowners (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 946e4f02e3bc9fafb3561655eaaf71128a7a37469e09460b0b9f3f204e850185 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11714 Malicious code in stackstorm-runner-action-chain (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0cc9e6be890f15ba83b67af002dc0fdec59a68ebdd2696ab5168df443ed2dabf Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in aiopbotocore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8d91c12a2d06f8bcdfe81cb5dde81548bff052f937e29424eb0e2fee1aa9074 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11715 Malicious code in sumo-py-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6ed9233fda861428b541d5a3188300bb67c877f6998c43e808dc5910b7113b4d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11683 Malicious code in python-drgn-commons-spark (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c5207bd91c5eab8a2ae9cda76c18027e600cbf015d01884048da00371577b3d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11702 Malicious code in search-python-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c88a2aa7e382781b4c0032b273e3e772875f1e3cbd8e22569c90d1d3ebf9198 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-4256 Malicious code in vfsrce18 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e469759fd14d2b1207e5da1f724c19e6dc6b2896feaf658ad78c4ad33e3748de Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11519 Malicious code in aiopbotocore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8d91c12a2d06f8bcdfe81cb5dde81548bff052f937e29424eb0e2fee1aa9074 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-11678 Malicious code in python-drgn-commons-all (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3ce33648003ab87b87342b026af5cbeb8d8f3f759af0f8c7ae3557a104ec3546 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data

Cybersecurity researchers have revealed a GitHub design flaw that allows access to deleted and private repository data. Learn…...

The vulnerability of the Logger Module in the Dell Software Repository Manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Logger Module in the Dell Repository Manager exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

CVE-2024-0231

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits...

UBUNTU-CVE-2024-0231

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits...

CVE-2024-0231

Removed by vendor...

Photon OS 5.0: Linux PHSA-2023-5.0-0154

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0154. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Denial Of Service (DoS)

github.com/argoproj/argo-cd is vulnerable to Denial of Service DoS. The vulnerability is due to insufficient input validation and resource management for large JSON payloads at the /api/webhook endpoint, which results in excessive memory allocation and triggers an Out Of Memory OOM kill, causing...

The vulnerability of the RubyGems.org repository, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the RubyGems.org repository for programming languages involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

GO-2024-2992 1Panel SQL injection in github.com/1Panel-dev/1Panel

1Panel SQL injection in github.com/1Panel-dev/1Panel...

Amazon Linux 2023 : composer (ALAS2023-2024-659)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-659 advisory. Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the composer install command running inside a git/hg repository which has specially crafted branch names c...