Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-426 Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-409 Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5

1:17.0.14.0.7-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.14.0.7-3 - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and for build' 1:17.0.14.0.7-2 - Do not pass nil to jvmdir macro in cjc logic - Related: RHEL-73867 1:17.0.14.0.7-2 - Adapt to newest cjc to fix...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2025-0422)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0422 advisory. 1:17.0.14.0.7-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.14.0.7-3 - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and fo...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from a privilege issue vulnerability that originates from decrypting connection secrets without proper privileges by testing the connection endpoint. No...

SUSE CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

OPENSUSE-SU-2025:0003-1 Security update for etcd

This update for etcd fixes the following issues: Update to version 3.5.12: Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 test: fix TestHashKVWhenCompacting: ensure all goroutine finished print error log when creating peer listener failed mvcc: Printing etcd backend database related...

CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

UBUNTU-CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

Smarts Smart Agent 安全漏洞

Smarts Smart Agent is a powerful, flexible and scalable tool from Smarts for monitoring wireless network performance and services from the end user's perspective. An SQL injection vulnerability exists in Smarts Smart Agent v1.1.0, which stems from a lack of validation of externally entered SQL...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

PT-2024-34396 · Unknown · Smart Agent

Name of the Vulnerable Software and Affected Versions: SmartAgent version 1.1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tests/interface.php" API endpoint. Recommendations: For SmartAgent version 1.1.0,...

CVE-2024-50713: Improper Neutralization of Special Elements used in an SQL Command

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

CLSA-2024-1734708244 Fix of 15 CVEs

OpenJDK 11.0.25 release, build 9. - CVE-2024-21131, CVE-2024-21138, CVE-2024-21140, CVE-2024-21144, CVE-2024-21145, CVE-2024-21147, CVE-2024-21208, CVE-2024-21210, CVE-2024-21217, CVE-2024-21235. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-October/038512.html -...

PT-2025-8761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's UDP socket handling. When a UDP socket changes its local address while receiving datagrams, there is a period during which a lookup operatio...

bluez security update

5.63-3 + bluez-5.63-3 - Add back the tests for OSCI. 5.63-2 + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229...

CLSA-2024-1734027856 nettle: Fix of CVE-2018-16869

Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations...