5994 matches found
Malicious code in sap-case (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df72ccd3a26b57183889e7490a0a49946b171fe6cf8aacdcb2df7f4480f840a5 The OpenSSF Package Analysis project identified 'sap-case' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7664 Malicious code in sap-case (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df72ccd3a26b57183889e7490a0a49946b171fe6cf8aacdcb2df7f4480f840a5 The OpenSSF Package Analysis project identified 'sap-case' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
UBUNTU-CVE-2024-39489
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6hmacinitalgo seg6hmacinitalgo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6hmacexit to only free the memory...
SUSE CVE-2024-37372
The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...
CVE-2024-5549
creationtimestamp| type| source ---|---|--- 2024-07-09 02:37:11+00:00| seen| https://t.me/cvedetector/221...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...
CVE-2024-37768
creationtimestamp| type| source ---|---|--- 2024-07-05 18:46:02+00:00| seen| Telegram/2868f05xZuQB3dwUhOpFZKP7D8vUeBjGOgoyMv4pohy...
New Support Website - July 15th 2024
New Support Website - July 15th 2024 Support.Citrix.com is migrating to a new platform. This is the main website for hosting public CTX knowledge articles and for customers to create and view their support cases. This new platform will launch on July 15th 2024 Callback and LiveChat are dependent ...
Astra Linux – Vulnerability in Firefox
In violation of the specification, cookie prefixes such as Secure were ignored if they were not capitalized correctly. According to the specification, these prefixes should be checked using a case-insensitive comparison. This could result in the browser not correctly implementing the behaviors...
CVE-2024-34027
A vulnerability was found in the Flash-Friendly File System F2FS in the Linux kernel, where the reservecompressblocks and releasecompressblocks functions were not adequately protected by the cprwsem lock. This locking deficiency could lead to race conditions, potentially causing data corruption o...
Malicious code in jewel-case (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2543 Malicious code in jewel-case (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover reserve,releasecompressblocks w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode...
CVE-2024-34027
CVE-2024-34027 corresponds to a Linux kernel/F2FS issue where the f2fs compress path ({reserve,release}_compress_blocks()) could race with checkpoint due to cp_rwsem lock issues, risking corruption of filesystem metadata (blkaddr in dnode, inode fields, and .total_valid_block_count) after SPO. Th...
CVE-2022-48728
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
DEBIAN-CVE-2022-48750
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775 Fix crash in clearcaseopen Paweł Marciniak reports the following crash, observed when clearing the chassis intrusion alarm. BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD 0 P4D 0 Oops: 0000 1...
CVE-2022-48734 btrfs: fix deadlock between quota disable and qgroup rescan worker
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl starts a transaction before waiting for the qgroup rescan worker completes. However, this wait can be infinite and results in deadlock because...
Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
Crypto exchange Kraken revealed that an unnamed security researcher exploited an "extremely critical" zero-day flaw in its platform to steal $3 million in digital assets and refused to return them. Details of the incident were shared by Kraken's Chief Security Officer, Nick Percoco, on X formerly...
Aggregated ticket for vulnerabilities in: org.owasp.antisamy:antisamy
Aggregation of vulnerabilities related to library: org.owasp.antisamy:antisamy Individual Confserver tickets are linked via Issue Links and should be addressed case-by-case. This ticket is created automatically. Do not close this ticket until all linked issues are resolved...
