CVE-2024-22776

creationtimestamp| type| source ---|---|--- 2024-02-23 16:32:06+00:00| seen| https://t.me/ctinow/191882 2024-02-23 16:41:45+00:00| seen| https://t.me/ctinow/191906 2024-03-14 00:46:27+00:00| seen| https://t.me/ctinow/207334...

PT-2024-2167 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: The issue is related to a flaw in the re-authentication mechanism within Keycloak, specifically in the org.keycloak.authentication module. This flaw allows an attacker to hijack an active...

MAL-2024-1013 Malicious code in ppui4theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c2215dd5ebd6f55cbebb09377d19d9db97e5256101cc540e318fcbf312dd75d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

wolfSSL 安全漏洞

wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An input validation error vulnerability exists in WolfSSL versions prior to 5.6.6, which stems from a failure to check if a message crosses a key boundary...

Malicious code in @globalsearch/productstub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db9198ae58933fe0f3654bbd2ac62d4b6ec815cc26dfc7544a545c48f89864a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-34214 CVE-2024-0229 affecting package xorg-x11-server for versions less than 1.20.10-12

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

Malicious code in test-pkg1-random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77270538ca293a7f66d412f3eb3ec40d376c802f70e860e1dfd8086497bb8f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Eclipse Vert.x Security Vulnerability

Eclipse Vert.x is an Eclipse Foundation toolkit for building responsive applications on the JVM. A security vulnerability exists in the Eclipse Vert.x toolkit that stems from the use of the Netty FastThreadLocal data structure can lead to a memory leak that could be triggered when the Vert.x HTTP...

Malicious code in wlwz-2312-1601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bc0e7158d5619f4e675f0c91a267739b04b6497be26ddeaa336c28335e8a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91a180812aa65636dc4f8d91254d835ca3d29888db6d7b6a763a9a273954f4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b47c803212c79d6d6e11e5019ccacf20bea70b775992dc91b61654e19515d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99edbe296b84fa648a12e2f1eb3d3d21a29db3b8a1a08ec2932aa350f5d1ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f04c9a040dad09f844a23714890485904a7d6566e6470298a27fe2d4b60b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-626 Malicious code in wlwz-2312-5006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc87bec41f2ebf72bd272350c4298d07b2db98307f128e013e4bc57b4c8fe74c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-517 Malicious code in wlwz-2312-3805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b7afd8c60ee4f474356edb072e946548d46617d828afa0c6b9706bd6a781ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 834d462d19ed8d1f3f3aa317ce3aaf4cb93789198f703052eeb16b82a3d282ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3336add1f70bb1296c7c568db5237e86cf729d1ec0216c0899c20760d2534471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...