14414 matches found
MAL-2023-1543 Malicious code in lp-vue-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e0fc5aaed8de1640179a965d23507da2a63fc462c9349da8ed2eae78398c577 The OpenSSF Package Analysis project identified 'lp-vue-components' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
UBUNTU-CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
Malicious code in react-vis-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b50bcb70f028287514bfdeca61e58907a79b80687a92a949e45abc009d38974 The OpenSSF Package Analysis project identified 'react-vis-master' @ 1.12.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1537 Malicious code in testtttecsc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b472556a0c7f3ae25ce3f656709d034c747b1f7c4158abf0850ed31061962e72 The OpenSSF Package Analysis project identified 'testtttecsc' @ 1.11.0 npm as malicious. It is considered malicious because: - The package...
Applying AI to License Plate Surveillance
License plate scanners arent new. Neither is using them for bulk surveillance. Whats new is that AI is being used on the data, identifying "suspicious" vehicle behavior: Typically, Automatic License Plate Recognition ALPR technology is used to search for plates linked to specific crimes. But in...
radare2 代码问题漏洞
radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a null pointer dereference issue in the coreanalfcn method...
PT-2023-12933 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: A null pointer deference issue exists in the core anal fcn function. Recommendations: For versions 5.4.0 and 5.4.2, consider disabling the core anal fcn function as a temporary workaround unti...
USN-6267-3 firefox regressions
USN-6267-1 fixed vulnerabilities and USN-6267-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...
Malicious code in securitytxt-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81dbfb4e2051327cc68f17d9de11e7e30f12956c5d402360c453029a80a59221 The OpenSSF Package Analysis project identified 'securitytxt-worker' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in owncloud-js-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 26163abe3e5a983c952c08703d6b6763543c0fc989b54027001520a78d7b145a The OpenSSF Package Analysis project identified 'owncloud-js-dev' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1503 Malicious code in web-dev-for-beginners (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12dfe4d59f97f208fa2c0392b71a0939ecbd509d7ccd7853cea8b3f4e13b317a The OpenSSF Package Analysis project identified 'web-dev-for-beginners' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in web-dev-for-beginners (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12dfe4d59f97f208fa2c0392b71a0939ecbd509d7ccd7853cea8b3f4e13b317a The OpenSSF Package Analysis project identified 'web-dev-for-beginners' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in z-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1df7db96fadf79c92ca77b7fd6e95a23c25f7d4c1f7507b4316730a4086d1dc The OpenSSF Package Analysis project identified 'z-foundation' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in wpi-rules-valid-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f8f8319f361dae60da61058ccd4776881160f6a820fbad5fe51373e6084e45b The OpenSSF Package Analysis project identified 'wpi-rules-valid-events' @ 6.6.6 npm as malicious. It is considered malicious because: - The...
Malicious code in jscrambler-dashboard-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a31aff9b73f313c920ebbb6370e3afc3139565f139114ab47ef7859e989f418 The OpenSSF Package Analysis project identified 'jscrambler-dashboard-components' @ 9.9.9 npm as malicious. It is considered malicious because: ...
Malicious code in wpi-xmldom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in hackonex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd990464934989c4f0f09088d11fbf428292fe463f5b5e234fed38b44beafb87 The OpenSSF Package Analysis project identified 'hackonex' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1492 Malicious code in github-deployment-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbecfc86b0734310a1e38d002a298fffa75da0631b0309309bd26ad98188e97a The OpenSSF Package Analysis project identified 'github-deployment-action' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in github-deployment-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbecfc86b0734310a1e38d002a298fffa75da0631b0309309bd26ad98188e97a The OpenSSF Package Analysis project identified 'github-deployment-action' @ 1.0.1 npm as malicious. It is considered malicious because: - The...