41 matches found
CLSA-2026-1774743842 TuxCare security update for bootstrap-sass (1 CVE)
TuxCare rebuilt bootstrap-sass to address 1 CVE. Fixed in 3.4.0-tuxcare.1...
PT-2026-74195
TuxCare rebuilt bootstrap-sass to address 1 CVE. Fixed in 3.4.0-tuxcare.1...
Malware in bootstrap-sass-official
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (4.0.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (4.0.0) +270 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=10.0.0, <=10.2.0)
org.apache.wicket:wicket-core MAVEN version =10.0.0, =1.0.0, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.3, =7.0.3, =0.2, =0.6.5 and more Source cves: CVE-2024-53299 Source advisory: GHSA-9CXR-76PM-J3WF...
MAL-2024-1832 Malicious code in bootstrap-sass-official (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2a7bd842611f44470a65604ac8bbe370ada242710bfe735059883033b680cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bootstrap-sass-official (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad2a7bd842611f44470a65604ac8bbe370ada242710bfe735059883033b680cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview bootstrap-sass-official is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
SUSE CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
Malicious Package
simplecaptcha2 is a malicious package. The package contains a backdoor similar to the bootstrap-sass malware, as seen in simplecaptcha2-0.2.3/lib/simplecaptcha/middleware.rb...
Malicious Package
datagrid is a malicious package. The package contains a backdoor similar to the bootstrap-sass malware, as seen in datagrid-1.0.6/lib/datagrid/drivers/abstractdriver.rb...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
Malicious Package
bootstrap-sass, version 3.2.0.3, is a malicious package. The vulnerability exists through a backdoor in lib/active-controller/middleware.rb in the value of the malicious cfduid cookie that is used in the eval function, causing arbitrary code execution attacks...
Bootstrap-sass contains code execution backdoor
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
GHSA-VQQV-V9M2-48P2 Bootstrap-sass contains code execution backdoor
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...
CVE-2019-10842
CVE-2019-10842 describes an arbitrary code execution backdoor in bootstrap-sass 3.2.0.3 when downloaded from rubygems.org. An unauthenticated attacker can craft the ___cfduid cookie value with base64-encoded code to be executed via eval(), enabling remote code execution on the target system. The ...
CVE-2019-10842
Arbitrary code execution via backdoor code was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft the cfduid cookie value with base64 arbitrary code to be executed via eval, which can be leveraged to execute arbitrary code on the target...