423 matches found
Malicious code in req-ip-scope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cac8b2dfbc3066e94727e843a2abe5a2af44476170248c207bf5026a8892d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11122 Malicious code in req-ip-ban (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ccb3d9a195046654b07e64e09e577fa33552b38ebea8854c5fffc5fed5043f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in req-ip-ban
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
PT-2024-35593
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description The issue is related to a commit in the Linux kernel that increased the max req size, even for 4K pages, causing various problems. These issues include panic booting the kernel/rootfs from an S...
CVE-2024-50154
A use-after-free UAF vulnerability was found and fixed in the Linux kernel's TCP subsystem related to request socket reqsk timers during handshake handling. This issue stems from a race condition caused by relying on timerpending in reqskqueueunlink. This could result in the timer continuing to r...
CVE-2024-50154
In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in reqskqueueunlink. Martin KaFai Lau reported use-after-free 0 in reqsktimerhandler. """ We are seeing a use-after-free from a bpf prog attached to tracetcpretransmitsynack. The program passes th...
Malicious code in client-req-scopes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in client-req-bans
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-10498 Malicious code in client-req-scopes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in client-req-scopes
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in puppeteer-req-interceptor
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-10344 Malicious code in puppeteer-req-interceptor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-16566
Name of the Vulnerable Software and Affected Versions code-projects E-Health Care System version 1.0 Description A critical vulnerability has been found in the code-projects E-Health Care System, affecting the file Admin/req detail.php. The manipulation of the id argument leads to SQL injection...
SUSE-SU-2024:3843-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn for dsidm commands bsc1231462 - Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...
Malicious code in req-bans (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10278 Malicious code in req-bans (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in req-bans
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-10279 Malicious code in req-scopes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff2585aad680d6ab6cfae142ed9f4aeac20d060968138d851b5daabe766969f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in req-scopes
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in req-ban (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9a1ab6f28d706cb286af274f9118a3e68076a1daca8d0c34a9499b9cbca5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...