869 matches found
MAL-2024-7486 Malicious code in sap-act (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 221d8d0fa70183e7db924b26c6bc4cf81969dc2b328c3b38ab1473605dc1caa7 The OpenSSF Package Analysis project identified 'sap-act' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...
kernel: net/sched: act_skbmod: Skip non-Ethernet packets
A vulnerability was found in the Linux kernel’s actskbmod module, where the tcfskbmodact function mistakenly assumes all packets use Ethernet as their protocol. This issue can lead to the corruption of non-Ethernet packets, such as those from CAN devices, if skbmod actions are incorrectly applied...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...
Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny
Meta's decision to offer an ad-free subscription in the European Union E.U. has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the...
Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)
This week on the Lock and Code podcast… More than 20 years ago, a law that the United States would eventually use to justify the warrantless collection of Americans phone call records actually started out as a warning sign against an entirely different target: Libraries. Not two months after...
Surprise! The Latest ‘Comprehensive’ US Privacy Bill Is Doomed
Gutted of civil rights protections by Democrats to woo pro-business Republicans, the American Privacy Rights Act was pulled from a key congressional hearing—and appears unlikely to receive a full vote...
MAL-2024-6504 Malicious code in acts-as_subscribable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6375 Malicious code in act-blue_reporter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_time_as_boolean (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-blue_reporter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_serializable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_nameable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6373 Malicious code in act-as_serializable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6372 Malicious code in act-as_nameable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6371 Malicious code in act-as_importable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_importable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-as_enumerable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...