RHSA-2015:2684 Red Hat Security Advisory: openstack-nova secuity and bug fix advisory

Bulletin has no description...

RHSA-2013:1767 Red Hat Security Advisory: ruby security update

Bulletin has no description...

RHSA-2013:1122 Red Hat Security Advisory: rhev-guest-tools-iso security and bug fix update

Bulletin has no description...

RHSA-2008:0814 Red Hat Security Advisory: condor security and bug fix update

Bulletin has no description...

RHSA-2011:0169 Red Hat Security Advisory: java-1.5.0-ibm security and bug fix update

Bulletin has no description...

RHSA-2004:050 Red Hat Security Advisory: mutt security update

Bulletin has no description...

CVE-2023-30583 vulnerabilities

Vulnerabilities for packages: nodejs...

MAL-2025-4665 Malicious code in grpc-google-bigtable-v2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9640f0015404a6fff13b4e9bbb9e01d3d4f545a8ae8935dc95425a427c561576 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-11603 Malicious code in haaahhaha (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c8c6599371614e7710276d1475abae424b77a913aed8885e7191b0db82d96e40 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...

Malicious code in @diotoborg/aperiam-iste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8b1e84bd8de9f5a3048435ab58b5bb57df28c17c5ecff7a2ac6de63784c3067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/illo-quos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f069eb615a888c0290c3fda5427f31f4ad7278df265badc7e83224052be7489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8138 Malicious code in @diotoborg/architecto-quis-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 816ba768980666c6d91c009857257420aaf4e8226c8ea5d292c8bf0041d4c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

Malicious code in viewability-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6ab3215e22d1ba76d15137a6915fc6703eb21620b8821706dc5b006ce735d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2024-7409

Bulletin has no description...

MAL-2024-7827 Malicious code in byted-ucenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd762c1705ab2397eb3a62b846f255e15a467f1913fade5a71de9b93d916fe6 The OpenSSF Package Analysis project identified 'byted-ucenter' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6528 Malicious code in jd-mlops (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27e0c1b0bb778a762b23a541daa571391b073db56f64e90af5a403dffe5bbff3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6600 Malicious code in testpysecure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a202500c9717ad118db7ef8eb8d4c1de85c1afdbb442748e18010d4cf6222d5b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

ROS-20240716-01

OpenSearch software package vulnerability related to unintentional access to resources of of users in the Dashboards Reports plugin. Exploitation of the vulnerability could allow an attacker to compromise the integrity of data. impact data integrity OpenSearch software package vulnerability relat...

CVE-2024-37147 GLPI allows Authenticated File Upload to Restricted Tickets

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to 10.0.16...