MeterSphere 代码问题漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. metersphere has an arbitrary file upload vulnerability, which can be exploited by remote attackers to submit special requests that can upload malicious files and write cron jobs to execute commands...

The vulnerability of the scheduler daemon in UNIX-like operating systems, Cron, related to pointer arithmetic errors, allows a malicious actor to trigger a service failure.

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

Ubuntu: Security Advisory (USN-5259-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-gorhill-cronexpr (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-gorhill-cronexpr-1.0.0-5.fc36

Given a cron expression and a time stamp, you can get the next time stamp whi ch satisfies the cron expression. In another project, I decided to use cron expression syntax to encode schedul ing information. Thus this standalone library to parse and apply time stamps to c ron expressions. The...

USN-5259-3: Cron regression | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-5259-1 and USN-5259-2 fixed vulnerabilities in Cron. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the...

USN-5259-2: Cron vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5259-1 fixed several vulnerabilities in Cron. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that the postinst maintainer script in Cron...

Hackers Target Ukrainian Software Company Using GoMet Backdoor

A large software development company whose software is used by different state entities in Ukraine was at the receiving end of an "uncommon" piece of malware, new research has found. The malware, first observed on the morning of May 19, 2022, is a custom variant of the open source backdoor known ...

Fedora: Security Advisory for golang-github-gorhill-cronexpr (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-gorhill-cronexpr-1.0.0-4.fc36

Given a cron expression and a time stamp, you can get the next time stamp whi ch satisfies the cron expression. In another project, I decided to use cron expression syntax to encode schedul ing information. Thus this standalone library to parse and apply time stamps to c ron expressions. The...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

CVE-2013-4561

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

Design/Logic Flaw

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

CVE-2013-4561

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity...

CVE-2013-4561

CVE-2013-4561 concerns OpenShift runtime: a cron job on an OpenShift node updates mcollective facts and mishandles a temporary file. The root cause is improper handling of a temporary file during that cron operation, which can lead to confidentiality and integrity losses. The NVD metrics indicate...

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift that stems from a cron job to update mcollective with error handling temporary...

Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-cron-master1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1116bb33470ca9581591802dcf0769f1108fc3116f737866e526ea461a13b237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cron-guru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59fc7f83ba3d39b56b332fb2105a5ffd56d875a6c3b9333e4210c56234c4825c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4882 Malicious code in node-cron-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae251f427512a885e950ac70e8039b90f8ef6d22e8393886461f599805dc0688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...