2104 matches found
Malicious code in Tessa.Net.V2 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Tessa.Linux.V2 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wp-delivery-hero-core-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 626c10f0486b04cda2d813bc50241e0676d4ab679f376a6922b10d61c961dfcb The OpenSSF Package Analysis project identified 'wp-delivery-hero-core-v2' @ 2.2.1 npm as malicious. It is considered malicious because: - The...
Malicious code in consensys-v2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2017 Malicious code in consensys-v2 (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2022-48769 efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports 0 that his recent MacbookPro crashes in the firmware when using the variable services at runtime. The culprit appears to be a call to...
MAL-2024-1600 Malicious code in v2-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e0286004b6b184a7ae2c0a7110095cd51122ae1c9ccc69db8d1bfd7380dfed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in v2-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e0286004b6b184a7ae2c0a7110095cd51122ae1c9ccc69db8d1bfd7380dfed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-24051
Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file...
CVE-2024-5674 Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management
The Newsletter - API v1 and v2 addon plugin for WordPress is vulnerable to unauthorized subscribers management due to PHP type juggling issue on the checkapikey function in all versions up to, and including, 2.4.5. This makes it possible for unauthenticated attackers to list, create or delete...
CVE-2024-5674 Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management
The Newsletter - API v1 and v2 addon plugin for WordPress is vulnerable to unauthorized subscribers management due to PHP type juggling issue on the checkapikey function in all versions up to, and including, 2.4.5. This makes it possible for unauthenticated attackers to list, create or delete...
PT-2024-20256 · Monoprice · Monoprice Select Mini V2
Name of the Vulnerable Software and Affected Versions: Monoprice Select Mini V2 version V37.115.32 Description: The issue arises from improper input validation of printing files, allowing attackers to instruct the device's movable parts to destinations beyond the device's maximum coordinates. Thi...
CVE-2024-24051
Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file...
RHEL 8 : kernel (RHSA-2024:3810)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3810 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...
CVE-2024-24051
Improper input validation of printing files in Monoprice Select Mini V2 V37.115.32 allows attackers to instruct the device's movable parts to destinations that exceed the devices' maximum coordinates via the printing of a malicious .gcode file...
CVE-2024-24051
CVE-2024-24051 concerns Monoprice Select Mini V2 (firmware version V37.115.32). The root cause is improper input validation of printing files (.gcode), enabling an attacker with local access and user interaction to instruct movable parts to destinations beyond the printer’s maximum coordinates. T...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: Spectre v2 SMT mitigations problem
It was found that the Linux Kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The kernel failed to protect applications that attempted to protect against Spectre v2 leaving them open to attack from other processes...
GO-2024-2792 Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd
Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences in github.com/argoproj/argo-cd...