SUSE-SU-2024:4021-1 Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Pat...

Exploit for Incorrect Default Permissions in Google Android

CVE-2022-20474 Analysis - Self-changed Bundle under LazyValue...

MAL-2024-10625 Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-bundle-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68813bb35808cbd5a214c8d01a2243e1d1e80df5cd37d11413bbedd08ffd9e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10621 Malicious code in pumpfun-bundle-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7c786bea01625419ab36f62b4214b13533254d53003e65c365db3a1e3d2e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pumpfun-bundle-helpers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7c786bea01625419ab36f62b4214b13533254d53003e65c365db3a1e3d2e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-43084

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:45+00:00| seen| https://t.me/cvedetector/10860...

CVE-2024-43090

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:43+00:00| seen| https://t.me/cvedetector/10858...

CVE-2024-23385

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429...

CVE-2024-43088

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:38+00:00| seen| https://t.me/cvedetector/10856...

CVE-2024-43080

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:58+00:00| seen| https://t.me/cvedetector/10870...

CVE-2024-43086

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:37+00:00| seen| https://t.me/cvedetector/10854...

CVE-2024-43087

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:38+00:00| seen| https://t.me/cvedetector/10855...

CVE-2024-43081

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429...

CVE-2024-50341

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom userchecker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to...

DEBIAN-CVE-2024-50341

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom userchecker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to...

UBUNTU-CVE-2024-50341

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom userchecker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to...

CVE-2024-50341 Security::login does not take into account custom user_checker in symfony/security-bundle

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom userchecker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to...

CVE-2024-50341 Security::login does not take into account custom user_checker in symfony/security-bundle

symfony/security-bundle is a module for the Symphony PHP framework which provides a tight integration of the Security component into the Symfony full-stack framework. The custom userchecker defined on a firewall is not called when Login Programmaticaly with the Security::login method, leading to...