3416 matches found
Malicious code in sampling-util (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1db5976272af4e14606000b677142e6eddfc03419c87b557e10610985ae226c1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-11700 Malicious code in sampling-util (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1db5976272af4e14606000b677142e6eddfc03419c87b557e10610985ae226c1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
OSV-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...
Malicious code in videoads-util-misc-general (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10255 Malicious code in videoads-util-misc-general (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-2682)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-2648)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability in the XMLSignatureUtil class of the Keycloak identity and access management software allows a hacker to circumvent existing security restrictions and gain increased privileges.
The vulnerability of the XMLSignatureUtil class in the software for managing identification and access control in Keycloak relates to the improper processing of signed elements of the cryptographic signature. Exploiting this vulnerability can allow a malicious actor to circumvent existing securit...
MAL-2024-9899 Malicious code in util-waiter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in util-waiter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in util-stream (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9898 Malicious code in util-stream (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in util-format-url (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in util-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9896 Malicious code in util-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9895 Malicious code in util-arn-parser (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in util-arn-parser (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9481 Malicious code in @vertiv-co/adx-jetstream-util (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-28085 affecting package util-linux for versions less than 2.39.2-2
CVE-2024-28085 affecting package util-linux for versions less than 2.39.2-2. An upgraded version of the package is available that resolves this issue...
