Malicious code in sandbox-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794308e22ed41480c05363605c926b36a0d0f31b315d2856dbe0cc66cf7e7709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-758 Malicious code in sandbox-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794308e22ed41480c05363605c926b36a0d0f31b315d2856dbe0cc66cf7e7709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-264 Malicious code in django-template-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a4058c9a8f986347dd22fe461b25c3ae525959ed7a05da257b79c7aa4d9aad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in django-template-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a4058c9a8f986347dd22fe461b25c3ae525959ed7a05da257b79c7aa4d9aad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerabilities in jdom affects IBM Common Licensing's Administration And Reporting Tool (ART) (CVE-2021-33813)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request . A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2021-33813...

Security Bulletin: Vulnerabilities in Spring Framework affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (CVE-2022-22978, 220811)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. In Spring Security versions 5.5.6 and 5.6.3 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. A fix is available to address the vulnerability...

Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (CVE-2022-42003, CVE-2022-42004)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. Faster-XML Jackson is a JSON to Java object conversion API CVE-2022-42003, CVE-2022-42004. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databi...

CVE-2022-27596

creationtimestamp| type| source ---|---|--- 2023-01-30 07:36:52+00:00| seen| https://t.me/cibsecurity/57141 2023-01-31 05:13:36+00:00| seen| https://t.me/thehackernews/3005 2023-01-31 11:05:10+00:00| seen| https://t.me/truesecator/4004 2023-01-31 18:56:44+00:00| seen| https://t.me/ctinow/90388...

编号已被CVE保留

No details are available at this time...

编号已被CVE保留

No details are available at this time...

Malicious Package

Overview seller-base-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview django-template-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview sandbox-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

CVE-2023-23621

creationtimestamp| type| source ---|---|--- 2023-01-28 02:34:58+00:00| seen| https://t.me/cibsecurity/57124...

CVE-2023-23151

creationtimestamp| type| source ---|---|--- 2023-01-27 00:43:55+00:00| seen| https://t.me/cibsecurity/56985...

CVE-2023-24450

creationtimestamp| type| source ---|---|--- 2023-01-27 00:39:14+00:00| seen| https://t.me/cibsecurity/56974...

The vulnerability of the sub-component of the Automated Test Suite of the Oracle HCM Common Architecture component of the Oracle E-Business Suite allows a perpetrator to manipulate data.

The vulnerability of the sub-component of the Automated Test Suite of the Oracle HCM Common Architecture in the Oracle E-Business Suite system relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to manipulate data remotely...

CVE-2022-42382

creationtimestamp| type| source ---|---|--- 2023-01-26 20:33:47+00:00| seen| https://t.me/cibsecurity/56904...

java-1.8.0-openjdk security and bug fix update

An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...

OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows...