[SECURITY] Fedora 33 Update: nbdkit-1.24.6-1.fc33

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

[SECURITY] Fedora 34 Update: nbdkit-1.26.5-1.fc34

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

ASP.NET Core Information Disclosure Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An information disclosure vulnerabilit...

CVE-2021-39158

NVCaffe's python required dependencies list used to contain gfortranversion prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe...

Code injection

NVCaffe's python required dependencies list used to contain gfortranversion prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe...

OPENSUSE-SU-2021:2817-1 Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

This patch updates the Python AWS SDK stack in SLE 15: General: aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all change...

AuraBorealisApp - Do You Know What's In Your Python Packages? A Tool For Visualizing Python Package Registry Security Audit Data

AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis designed for large scale security auditing of Python packages. The...

ansi_term is Unmaintained

The maintainer has advised that this crate is deprecated and will not receive any maintenance. The crate does not seem to have much dependencies and may or may not be ok to use as-is. Last release seems to have been three years ago. Possible Alternatives The below list has not been vetted in any...

rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source

A flaw was found in the way Bundler determined the source repository when installing dependencies of source-restricted gem packages. In configurations that use multiple gem repositories and explicitly define from which source repository certain gems are to be installed, a dependency of a...

LoGiC.NET - A More Advanced Free And Open .NET Obfuscator Using Dnlib

LoGiC.NET is a free and open-source .NET obfuscator that uses dnlib for folks that want to see how obfuscation works with more complex obfuscations than Goldfuscator for example. Before obfuscation After obfuscation Dependencies dnlib v3.3.2 : Restore NuGet packages and it'll work if it doesn't...

MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

Crawl SMB shares for juicy information. File content searching + regex is supported! File types supported: PDF DOCX XLSX PPTX any text-based format and many more!! MAN-SPIDER will crawl every share on every target system. If provided creds don't work, it will fall back to "guest", then to a null...

Kali-Whoami - A Privacy Tool Developed To Keep You Anonymous On Kali Linux At The Highest Level

The purpose of the Whoami tool makes you as anonymous as possible on Kali linux. It is an user friendly with its ease of use and simple interface. It follows two different paths to ensure the highest possible level of anonymity. Finally, don't forget that there is never a hundred percent security...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +2 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (11.0.2)

org.keycloak:keycloak-model-infinispan MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

org.keycloak:keycloak-dependencies-server-all (3.1.0.final) potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (3.1.0.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.final Source cves:...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (3.2.1.final)

org.keycloak:keycloak-model-infinispan MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.0.final) potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (2.5.0.final)

org.keycloak:keycloak-model-infinispan MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.0.final Source cves:...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +9 more potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (10.0.2)

org.keycloak:keycloak-model-infinispan MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 -...

org.keycloak:keycloak-dependencies-server-all (1.9.0.cr1) potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (1.9.0.cr1)

org.keycloak:keycloak-model-infinispan MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.cr1 Source cves:...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final) potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (1.9.0.final)

org.keycloak:keycloak-model-infinispan MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final Source cves:...

org.keycloak:keycloak-dependencies-server-all (1.9.1.final) potentially affected by CVE-2021-3637 via org.keycloak:keycloak-model-infinispan (1.9.1.final)

org.keycloak:keycloak-model-infinispan MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-infinispan and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.1.final Source cves:...