1552 matches found
MGASA-2024-0358 Updated mpg123 packages fix security vulnerability
An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution may not be dismissed. The complexity required to exploit this fla...
Malicious code in pupeteerreqintercepter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a217fdabdcda03ee1d01755ca128aecf9f98f7c3f9883f4f39eb1a0fe00e799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11661 Malicious code in pplgdfhuighsdfyisfdty (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a6da12f1a169dc997d18e49311bb47be99e753dca10106e2bde591c0618268d1 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...
MAL-2024-11596 Malicious code in fidnffvvbfhghghhhh (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 53e1b3f1fc19bbc10acfd813b8839f3831cc7624906c54a8ea4ca6a2d2706877 Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...
Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10205 Malicious code in web3-py-tools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rollup-darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ideological-peach-scallop (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in atlassian-oauth2-plugin (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-MC76-5925-C5P6 vulnerabilities
Vulnerabilities for packages: buildah, skopeo, skopeo-fips, zot, podman...
CVE-2024-9392 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-45614 vulnerabilities
Vulnerabilities for packages: gitlab-cng, ruby3.2-puma...
RHSA-2022:6531 Red Hat Security Advisory: OpenShift Container Platform 4.10.33 packages and security update
Bulletin has no description...
RHSA-2022:4965 Red Hat Security Advisory: OpenShift Container Platform 4.7.53 packages and security update
Bulletin has no description...
RHSA-2017:0161 Red Hat Security Advisory: python-XStatic-jquery-ui security update
Bulletin has no description...
RHSA-2019:1652 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2019:0985 Red Hat Security Advisory: mod_auth_mellon security update
Bulletin has no description...
RHSA-2016:1630 Red Hat Security Advisory: rh-python34-python security update
Bulletin has no description...