CVE-2022-35414

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translatefail path, leading to an ioreadx or iowritex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use ca...

QEMU 安全漏洞

QEMU Quick Emulator is a set of emulation processor software from Fabrice Bellard, a French personal developer. The software is fast and cross-platform. physmem.c version 7.0.0 and below of QEMU has a denial-of-service vulnerability, which stems from the possibility of uninitialized reads of the...

Experts Uncover 350 Browser Extension Variants Used in ABCsoup Adware Campaign

A malicious browser extension with 350 variants is masquerading as a Google Translate add-on as part of an adware campaign targeting Russian users of Google Chrome, Opera, and Mozilla Firefox browsers. Mobile security firm Zimperium dubbed the malware family ABCsoup, stating the "extensions are...

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-221

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Privilege escalation

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-221

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

CVE-2022-34061 concerns the Catly-Translate PyPI package, where versions 0.0.3–0.0.5 are described as containing a code execution backdoor. The description notes attacker access to sensitive user information and digital currency keys, plus privilege escalation. The initial and connected records i...

Catly-Translate 安全漏洞

Catly-Translate is the easy-to-use Baidu translation method. A security vulnerability exists in Catly-Translate. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

CVE-2022-34061: Undefined Security Weakness

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Malicious code in wf-translate-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1328b0a046ab215c07647d9ab5ec8f409dbbf97c2fdfb04ff82004faf5340c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7123 Malicious code in wf-translate-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1328b0a046ab215c07647d9ab5ec8f409dbbf97c2fdfb04ff82004faf5340c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-531 Malicious code in @primeo/translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7def3fb9b8d9b4e3d6cc24d2c370f676f0a709186e1079e051c5e48431c6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1908 Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ngx-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1100a503faf33aad0489ce41d03404d9f250bc81751ec29be8109e87d9c6d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@eqproject/eqp-dashboard (>=2.0.3, <=2.5.2), @eqproject/eqp-datetimerangepicker (>=0.0.1, <=3.0.10) +7 more potentially affected by unknown CVE via ngx-translate (0.0.1-security)

ngx-translate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ngx-translate and may be impacted: - @eqproject/eqp-dashboard =2.0.3, =0.0.1, =2.0.10, =0.0.1, =18.0.0-beta.2 - kms-ngx-ui 16.12.30 - mat-table-ext 0.0.0 -...