CVE-2024-48931

ZimaOS (fork of CasaOS) versions 1.2.4 and earlier are affected by an arbitrary file read vulnerability in the API endpoint /v3/file?token=&files=, caused by improper input validation on the files parameter. Authenticated users can manipulate the files value to access sensitive files outside the ...

CVE-2024-48931 ZimaOS Arbitrary File Read via Parameter Manipulation

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint http:///v3/file?token=&files= is vulnerable to arbitrary file reading due to improper input validation. By manipulating the files...

CVE-2024-48931 ZimaOS Arbitrary File Read via Parameter Manipulation

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint http:///v3/file?token=&files= is vulnerable to arbitrary file reading due to improper input validation. By manipulating the files...

CVE-2024-48931 ZimaOS Arbitrary File Read via Parameter Manipulation

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the ZimaOS API endpoint http:///v3/file?token=&files= is vulnerable to arbitrary file reading due to improper input validation. By manipulating the files...

Google Chrome Code Execution Vulnerability (CNVD-2025-00214)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that can be exploited by an attacker to run arbitrary code on the system...

USN-7072-2: Linux kernel (GKE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Watchdog drivers; - Netfilter; - Network traffic control; CVE-2024-38630, CVE-2024-27397, CVE-2024-45016...

PT-2024-33169 · Sage · Sage 1000

Name of the Vulnerable Software and Affected Versions: Sage 1000 version 7.0.0 Description: An Unrestricted File Upload vulnerability exists, allowing authorized users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files, such as HTM...

USN-7076-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter MANA driver; - Watchdog drivers; - Netfilter; - Network traffic control;...

Malicious code in tapable1types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06f6008e10e159c6e89486a4fc8dde882928265f950bc52ea0566194956dc786 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-with-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d63a2684b4dce89fe62dddc35e9699b9a3473378f32fc8c13c1a1bdead8b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nokia Service Router Operating System 安全漏洞

Nokia Service Router Operating System Nokia SR OS is an operating system used by Nokia of Finland for its service router series. A security vulnerability exists in Nokia Service Router Operating System SR OS prior to version 24, where the router allows read and write access to a user configured...

Malicious code in 2mul1k (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da2250b764463375588d49e82f6a7bc6ca0d1831d20fb9daacf172ecb998d267 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 844b5t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94eb1a3b22cc1d70762d22b1b4267f152ebd42f59622a80427938d470e946ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9373 Malicious code in hpkofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35d1b95291e601b027075607893a6eda408516de1407619b513432c3c2e6d1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kald0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b0a25465a0ec47537a56aa181edb7f3959f7a20b971d8d6d388f89783cc590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyt2tn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 312173873c2fb333f42e0058f026f798ef0dcceb5b80ba8f4d34f8ccf71c0a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in availab-le-alb-um-zip-25931-the-life-aquatic-studio-sessions-mocn6-tnmvnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079687bc4eb89b80d1248111bbcffc5f68f4db1447a830acc63113bc230361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avail-able-albu-m-down-load-114925-rainier-fog-nuh7o-acneyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72642b19573c9e24f11f0ecbf3726e03c29dc2bd1ca90990c5d3d39e721730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-lbum-do-wnload-avai-lable-file-261573-generations-do7io-mdogom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 974adf7e9293e43d1bd242c66bdf7937c22fcce448e57ea8048610db0633be0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2797f58177b66d9be1500b40bd7b910b50660e07b0b4b73780746fcfcf57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...