3049 matches found
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
Linux Distros Unpatched Vulnerability : CVE-2023-53599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to...
Malicious code in aes-create-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32024f762cae5f727853e7d6e07ee5012a1b440d859182a62be6123eb638e873 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47972 Malicious code in aes-create-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32024f762cae5f727853e7d6e07ee5012a1b440d859182a62be6123eb638e873 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47979 Malicious code in jito-sub-aes-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103b0ca3b2a6d09bab1b2b0a19d08540d01dfbfe07e7eba218427c25239cfbc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32653
Malicious code in aes-create-ipheriv npm...
EUVD-2025-32654
Malicious code in jito-sub-aes-ipheriv npm...
EUVD-2015-8141
Malware in sbrugna...
EUVD-2018-17564
Malware in sbrugna...
EUVD-2017-9053
Malware in sbrugna...
EUVD-2017-0069
Malware in sbrugna...
EUVD-2020-19704
Malware in sbrugna...
EUVD-2020-0050
Malware in sbrugna...
EUVD-2016-7712
Malware in sbrugna...
EUVD-2009-3262
Malware in sbrugna...
EUVD-2019-8534
Malware in sbrugna...