Huawei EulerOS: Security Advisory for iscsi-initiator-utils (EulerOS-SA-2024-2271)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-34727

In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7951 Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7975 Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in module-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in dx-feedback-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in mmp-test-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...

Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive...

Malicious code in mmp-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb46d1d23ab47e71a3d4b40022a8e93d5c2d099e133d1c45bf7563d370a6773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7734 Malicious code in mmp-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb46d1d23ab47e71a3d4b40022a8e93d5c2d099e133d1c45bf7563d370a6773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 ...

RHEL 9 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - loader-utils: prototype pollution in function parseQuery in parseQuery.js CVE-2022-37601 - A vulnerabilit...

Malicious code in @mariott/mi-headless-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 052067d97e0b49250cecab16aa79fa0a7dec5cb225d908a93dc9db97fb2f74d1 The OpenSSF Package Analysis project identified '@mariott/mi-headless-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

openSUSE Security Advisory (SUSE-SU-2024:1639-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...