Malicious code in @zitterorg/eligendi-sequi-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beb1d66df63cc4f27eac32323d7c45e4c5d486ea3345d3ac4ed13d074e16e4e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/vitae-blanditiis-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48b420353d221ffe6619647cc992a6592b7177f2ec41ad745160f363dee1ed71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-6852-1 wget vulnerability

It was discovered that Wget incorrectly handled semicolons in the userinfo subcomponent of a URI. A remote attacker could possibly trick a user into connecting to a different host than expected...

Malicious code in dsain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c297dbb19c09d8f71ccdbc712626dbf279bb972fe57afe0c04dc8e27f723a9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22217 · Unknown · Unem Server +1

Name of the Vulnerable Software and Affected Versions: UNEM server / APIGateway affected versions not specified FOXMAN-UN/UNEM server / APIGateway affected versions not specified Description: A vulnerability exists in the UNEM server / APIGateway that allows a malicious user to perform an arbitra...

Malicious code in win66lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef7e6b9c91af7d4a4e2199453260e026047e3029e2d8cc795fd530f1e6e1e8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/repudiandae-esse-aliquid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 292fb4db28ebbc11c42fe14cbf53cad8a872abfb1e971b2c272887d1c165a9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/provident-eius-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6a438197140a3656a9fc9711ffea0b742baf6d76dfcaa307e43e75e0a0bb01a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nostrum-a-molestias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99199280fb22a96400c7c5464e90c6b2e70428de874fbab885afd7e999d0de09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/dolorem-eius-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d11af956dfecb2b78e35fcb03a281d3d3d323efff92d5822681014b5ae3377c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/dolor-omnis-vitae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e3a16cb14eb4985adf9309269e97d31bea65cc6d8357cc323e9eeb95070679 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/cupiditate-optio-explicabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89c0c193ed256764c094efdfeba78bbe9b91c550a0f18c057a38bd2e66942389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/consequuntur-iusto-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e60b0b781ba924189369693194aa3a108da4d111edb467b1d65cca4d85bb0dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

A flaw was found in Go's net/http/cookiejar standard library package. When following an HTTP redirect to a domain that is not a subdomain match or an exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect...

xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

UBUNTU-CVE-2021-47259

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix use-after-free in nfs4initclient KASAN reports a use-after-free when attempting to mount two different exports through two different NICs that belong to the same server. Olga was able to hit this with kernels starting...

UBUNTU-CVE-2024-32020

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source repository is owned by a...

Malicious code in @content-platform/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8483b2f250f1824837729cc5bf8f6fa9fe76e44cc5c0e9352b1112c8c83cd0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

WordPress Different Menu in Different Pages plugin <= 2.3.2 - Missing Authorization to Menu Duplication vulnerability

Missing Authorization to Menu Duplication vulnerability discovered by Lucio Sá in WordPress Plugin Different Menu in Different Pages versions = 2.3.2...