Malicious code in traceviz-angular-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7506396340e0fbf5af727101b0de36f0206b339fe3d96829af17496da4b406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-CW76-H7WR-RH77

creationtimestamp| type| source ---|---|--- 2025-01-26 10:06:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3127...

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

CVE-2024-57917 topology: Keep the cpumask unchanged when printing cpumap

In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, the following warning was discovered: different return values 15 and 11 from vsnprintf"%pbl ", ... test:keyward is WARNING in kvasprintf WARNING: CPU:...

CVE-2024-49338: Improper Management of Sensitive Trace Data

IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials...

PT-2025-2827 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 12.0.1.0 through 12.0.7.0 IBM App Connect Enterprise version 13.0.1.0 Description: The issue allows a privileged user to obtain JMS credentials under certain configurations. This is related to improper...

The vulnerability of the `perf_event_detach_bpf_prog()` function in the kernel/trace/bpfTrace.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the perfeventdetachbpfprog function in the kernel/trace/bpfTrace.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Tempo has been released Red Hat OpenShift distributed tracing platform based on Tempo. Tempo is an open-source, easy-to-use, and highly scalable distributed tracing backend. It provides observability for microservices architectures b...

CVE-2025-23038

creationtimestamp| type| source ---|---|--- 2025-01-14 01:18:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3ga6x5s2t 2025-01-14 01:53:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfo5dvhh2g2y 2025-01-14 03:07:15+00:00| seen|...

CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

CVE-2024-57838 s390/entry: Mark IRQ entries to fix stack depot warnings

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

CVE-2024-56368 ring-buffer: Fix overflow in __rb_map_vma

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in rbmapvma An overflow occurred when performing the following calculation: nrpages = nrsubbufs + 1 dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0 lib/dumpstack.c:120 printaddressdescriptio...

CVE-2024-56368

CVE-2024-56368 (Linux kernel) : The issue is a slab-out-of-bounds in the tracing ring buffer path, specifically in __rb_map_vma. A faulty overflow calculation for nr_pages in the expression nr_pages = ((nr_subbufs + 1) <

CVE-2024-56786

In the Linux kernel, the following vulnerability has been resolved: bpf: put bpflink's program when link is safe to be deallocated In general, BPF link's underlying BPF program should be considered to be reachable through attach hook - link - prog chain, and, pessimistically, we have to assume th...

U.S. Dept Of Defense: ASP.NET Application Trace Enabled

The ASP.NET application trace feature was enabled on a public-facing URL, which exposed sensitive internal information, including Session ID values and the physical file paths of server-side resources. This vulnerability could have allowed attackers to gain unauthorized insights into the server...

PT-2025-1009 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.2R3-S8 through 21.2R3-S9 Junos OS versions 21.4R3-S7 through 21.4R3-S9 Junos OS versions 22.2R3-S4 through 22.2R3-S5 Junos OS versions 22.3R3-S2 through 22.3R3-S4 Junos OS versions 22.4R3 through 22.4R3-S5 Junos OS versio...

CVE-2024-25037

CVE-2024-25037 affects IBM Cognos Controller (11.0.0–11.0.1) and IBM Controller (11.1.0). The issue allows a remote attacker to obtain sensitive information when a stack trace is returned in the browser, due to exposure in error reporting. Impact is described as information disclosure (CVSS 3.1/3...

CVE-2024-25037 IBM Cognos Controller information disclosure

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser...

SUSE CVE-2024-56759

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfscowblock, and we have the tracepoint tracebtrfscowblock enabled and preemption is also enabled CONFIGPREEMPT=y, we can...

CVE-2024-25037: Generation of Error Message Containing Sensitive Information

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser...