Exposure Of Resource To Wrong Sphere

github.com/hashicorp/nomad is vulnerable to Exposure Of Resource To Wrong Sphere. The vulnerability is due to the API caller’s ACL token secret ID getting exposed to Sentinel policies...

MAL-2024-1210 Malicious code in recxn-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccd7ee6ab1ab371569d54327f1be159efb74e581af0866b91b5b724e9c4cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-logs-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbe55f1c7c7a2f1783114a88a3045cdb6a0b355459aa66c2c364e68f396466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1204 Malicious code in discord-logs-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbe55f1c7c7a2f1783114a88a3045cdb6a0b355459aa66c2c364e68f396466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-43936 CVE-2020-36829 affecting package perl-Mojolicious 8.57-3

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

AZL-45018 CVE-2020-36829 affecting package perl-Mojolicious 8.57-3

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

DEBIAN-CVE-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

CVE-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

UBUNTU-CVE-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

CVE-2024-27488

Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter method to authenticate the http restful ap...

CVE-2024-27488

ZLMediaKit versions 1.0–8.0 are affected by an Incorrect Access Control vulnerability that enables remote attackers to escalate privileges and obtain sensitive information. The issue stems from the application enabling the HTTP API interface by default and using a secret parameter for authenticat...

CVE-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to securecompare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

PT-2024-21918 · Unknown · Zlmediakit

Name of the Vulnerable Software and Affected Versions: ZLMediaKit versions 1.0 through 8.0 Description: The issue allows remote attackers to escalate privileges and obtain sensitive information due to an Incorrect Access Control vulnerability. The application system enables the http API interface...

Malicious code in nespresso-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecb1d1aad101d1cf5bdd8986e77fa20c75f039412cec1ebe03442f8fec9f939 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodash-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2024-2669 API token secret ID leak to Sentinel in github.com/hashicorp/nomad

A vulnerability exists in Nomad where the API caller's ACL token secret ID is exposed to Sentinel policies...

Center Identity Launches Patented Passwordless Authentication for Businesses

By Cyber Newswire Center Identity, a pioneering cybersecurity company, is excited to unveil its patented secret location authentication, reshaping how businesses… This is a post from HackRead.com Read the original post: Center Identity Launches Patented Passwordless Authentication for Businesses...

MAL-2024-1200 Malicious code in context-hydrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff67bde088549900a1c4d6c993e527f335f8c00e9f4d3d9e4a37dba1a81f0658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-1139

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a repository pull secret...

MAL-2024-1190 Malicious code in hydrogen-sfdgspsdmq-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f335f9d806c828eeddff7f8424627b1b60dd7471b65a399c2fcddb75f6634d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...