CVE-2024-34397: Authentication Bypass by Spoofing

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

UBUNTU-CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

CVE-2024-34397

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

MAL-2024-1335 Malicious code in @ssr-frontend/test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03b39fa743b5b3cc6ff2265f4913473e51a661ac1f7d41f7855e4ced61af77aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @ssr-frontend/test-poc3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1340 Malicious code in test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd2e1b9551e2d05eb6769e870035396fbdd5bd09b3116b00901a73cb9e64859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1339 Malicious code in test-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d622822e0356b992f815ba0a803ee7598a5ff51894216a53a95ac034ca1185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1336 Malicious code in @sxmp/detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b24acdfdf427c93c47d6102673a06c407f1cd84e0508d1db4c11a98309a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 38 Update: grub2-2.06-118.fc38

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

Ashlar Vellum Graphite security vulnerability

Ashlar Vellum Graphite is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Graphite that stems from an out-of-bounds write remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an affected installation...

Ashlar Vellum Cobalt security vulnerability

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar. A security vulnerability exists in Ashlar Vellum Cobalt that stems from an out-of-bounds read remote code execution vulnerability that could allow a remote attacker to execute arbitrary code on an...

MAL-2024-1319 Malicious code in clistsy-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d90d0caac26d33fe35373881cd3af29619f9941a50edf7def106fb9a4f2243f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in clistsy-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1320 Malicious code in grylls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9770d42f49225e25b65dff54acc2ca5a625076784e40ae656541b46fb085ab36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

China Has a Controversial Plan for Brain-Computer Interfaces

China's brain-computer interface technology is catching up to the US. But it envisions a very different use case: cognitive enhancement...

MAL-2024-1309 Malicious code in npm-package-shirley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bfc7deaed3dbd7f0253cf5cbc9c24ef076ab683fe3ca0aa06231c59f1fd36c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: scsi: qla2xxx: Array index may go out of bound

A flaw was found in the Linux kernel qla2xxx SCSI driver. A static analysis tool reported that the array vha-hoststr, sized to hold 16 characters, could be indexed with values outside its valid range, potentially leading to out-of-bounds writes. The root cause was the use of sprintf without...

kernel: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fcbsgtorport Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fcbsgtorport could be NULL and dereferenced. Check valid rport returned b...

Malware in vue2-amis-custom-widget-k

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...