Lucene search
+L

189 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:12 p.m.5 views

Malicious code in yelp-biz-action-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc33eaf2b6527c1a5e4c4ddedb8984ebe050cd7ac3adb91d76ff09e08e5f100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:12 p.m.12 views

MAL-2022-7335 Malicious code in yelp-biz-action-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc33eaf2b6527c1a5e4c4ddedb8984ebe050cd7ac3adb91d76ff09e08e5f100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Snyk
Snyk
added 2022/06/20 8:9 p.m.1 views

Malicious Package

Overview @8x8/oxygen-constants is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2022/06/20 8:9 p.m.18 views

MAL-2022-54 Malicious code in @8x8/oxygen-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beffc553c7f6ee0e696c3aa46aea8df47ff607906e6fb51e52615a57e72158c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CNNVD
CNNVD
added 2022/05/02 12:0 a.m.3 views

Cyclos 4 PRO 跨站脚本漏洞

Cyclos 4 PRO is a web server. a cross-site scripting vulnerability exists in Cyclos 4 PRO version 4.14.7 and earlier, which stems from a failure to validate user input during error notification. A remote, unauthenticated attacker could execute javascript code via undefine enumeration constants...

6.1CVSS6AI score0.03949EPSS
Exploits4References7
OSV
OSV
added 2022/03/07 9:15 a.m.4 views

CVE-2022-0440

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog ie DISALLOWUNFILTEREDHTML, DISALLOWFILEEDIT and DISALLOWFILEMODS...

7.2CVSS7.1AI score0.0142EPSS
Exploits2References1
Fedora
Fedora
added 2022/02/06 2:3 a.m.46 views

[SECURITY] Fedora 34 Update: kernel-headers-5.16.5-100.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.0101EPSS
Exploits2
OSV
OSV
added 2022/02/01 2:15 a.m.11 views

AZL-8413 CVE-2021-46669 affecting package mariadb for versions less than 10.6.7-1

MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...

7.5CVSS7.2AI score0.02403EPSS
Exploits1References1
Fedora
Fedora
added 2021/11/27 1:12 a.m.51 views

[SECURITY] Fedora 35 Update: kernel-headers-5.15.4-200.fc35

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

6.7CVSS6.5AI score0.00643EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.7 views

The vulnerability of the FUEL CMS content management system, which arises due to the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions in the fuel/modules/fuel/config/fuelconstants.php and fuel/modules/fuel/libraries/Asset.php files of the FUEL CMS content management system exists due to the lack of measures taken to neutralize these special elements. Exploiting this vulnerability can allow a...

9.3CVSS7.5AI score0.01294EPSS
Exploits1References4Affected Software1
Fedora
Fedora
added 2021/07/22 1:16 a.m.13 views

[SECURITY] Fedora 33 Update: kernel-headers-5.13.3-100.fc33

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

2.8AI score
Exploits0
Fedora
Fedora
added 2021/05/16 2:3 a.m.95 views

[SECURITY] Fedora 34 Update: kernel-headers-5.11.20-300.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.2CVSS7.8AI score0.27477EPSS
Exploits8
Fedora
Fedora
added 2021/04/16 2:44 p.m.73 views

[SECURITY] Fedora 32 Update: kernel-headers-5.11.14-100.fc32

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS6.8AI score0.03259EPSS
Exploits3
Fedora
Fedora
added 2021/03/20 12:21 a.m.100 views

[SECURITY] Fedora 34 Update: kernel-headers-5.11.7-300.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.00305EPSS
Exploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/02/08 7:33 a.m.157 views

Reverse Engineering Keys from Firmware. A how-to

TL;DR It is possible to reverse engineer keys from firmware with some tips: 1. Always looks for strings/constants. 2. Make guesses about the original source. 3. Find a function you can recognise and work backwards to identify other functions. 4. It helps if they use open-source code so you can cr...

6.9AI score
Exploits0
OSV
OSV
added 2020/06/27 12:15 p.m.3 views

UBUNTU-CVE-2020-15358

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation...

5.5CVSS6.8AI score0.01027EPSS
Exploits1References4
Fedora
Fedora
added 2020/02/18 1:46 a.m.10 views

[SECURITY] Fedora 31 Update: kernel-headers-5.4.18-200.fc31

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

2.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2020/02/17 9:31 a.m.6 views

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.4AI score0.06937EPSS
Exploits0References4
Fedora
Fedora
added 2019/11/13 6:36 a.m.57 views

[SECURITY] Fedora 31 Update: kernel-headers-5.3.11-300.fc31

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.03133EPSS
Exploits0
Fedora
Fedora
added 2019/10/17 9:38 p.m.46 views

[SECURITY] Fedora 31 Update: kernel-headers-5.3.6-300.fc31

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

9.8CVSS2.8AI score0.12651EPSS
Exploits0
Rows per page
Query Builder