13238 matches found
MAL-2023-798 Malicious code in speedtesto (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea291fb5f10bb5f4fec190257342afa539f082d724229d3316d408ba2277c5ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-797 Malicious code in speedtestkas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-802 Malicious code in speedtestwow (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d415ef0e693ddaf1de67c1517d973f2bd74ff94ce4178530cffc9df573b09f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in speedtestwow (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d415ef0e693ddaf1de67c1517d973f2bd74ff94ce4178530cffc9df573b09f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-803 Malicious code in speedtestzo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66cf7ce735c1b6078d016614ca6583eefe136fac77b718e3a7395c4025f79031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-46505
An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data...
API Mediation Layer 授权问题漏洞
The API Mediation Layer is an API mediation layer that provides a single access point to the Mainframe Services REST API. A security vulnerability exists in API Mediation Layer versions 1.16 through 1.19. An attacker exploiting this vulnerability could manipulate JWT tokens without knowing the JW...
Malicious code in cathode-versions-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e16e7e4327697f795d989d71781e02f4036cfffca1d0dce1e5b9a6f0a54f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @balea-telefonica/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563059871426877f31b5ba1bd33fda80482ee48032d184d83e400daf25d54b99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GitLab 9.3 < 15.4.6 / 15.5 < 15.5.5 / 15.6 < 15.6.1 (CVE-2022-4054)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was...
Authentication flaw
Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token JWT, an attacker cou...
CVE-2023-22495 Izanami is vulnerable to Authorization Bypass
Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token JWT, an attacker cou...
PT-2023-18546 · Izanami · Izanami
Name of the Vulnerable Software and Affected Versions: Izanami versions prior to 1.11.0 Description: The issue allows attackers to bypass authentication in the application when deployed using the official Docker image. This is due to a hard-coded secret used to sign the authentication token JWT,...
MAL-2023-692 Malicious code in prathmi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463a1fff2f77680560596dbe40c47204ae5c79228c5dad33399f9fdd4441c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2022-4342
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak masked webhook secrets by changing target URL of the webhook...
GitLab Enterprise Edition和GitLab Community Edition 安全漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE version 15.1 up to and including versi...
CVE-2022-4342
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak masked webhook secrets by changing target URL of the webhook...
CVE-2021-26403
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality...