MAL-2022-2716 Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2715 Malicious code in ember-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc242e9ee4713b30aee81ff739dc19c110f1e9753eaccefd8d26de3f2a9c2e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc242e9ee4713b30aee81ff739dc19c110f1e9753eaccefd8d26de3f2a9c2e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-graceful-retry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9719465917747564618bbf24880f912f847f8f586efcccc286f85338d802f11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2718 Malicious code in ember-graceful-retry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9719465917747564618bbf24880f912f847f8f586efcccc286f85338d802f11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2720 Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-ember-rules-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb99774c71f7a0427824181abb35d3a800cbfe36e63e1a632fa269ee682cedba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2814 Malicious code in eslint-plugin-ember-rules-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb99774c71f7a0427824181abb35d3a800cbfe36e63e1a632fa269ee682cedba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2723 Malicious code in ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1424c1057e118eb6d936f1b1295704f4850694a07e7c50e11e0582b48e4814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1424c1057e118eb6d936f1b1295704f4850694a07e7c50e11e0582b48e4814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-16999 · Unknown · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet containing an invalid destination address causes a stack overflow in the Ember ZNet stack. This leads to an assert, resulting in a reset, which immediately clear...

Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

GHSA-XHV5-W9C5-2R2W Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

Unbounded connection acceptance leads to file handle exhaustion

Impact All servers running blaze-core = 0.14.14, including blaze-http and http4s-blaze-server users, are affected. Blaze, accepts connections unconditionally on a dedicated thread pool. This has the net effect of amplifying degradation in services that are unable to handle their current request...

PT-2021-14396 · Unknown +2 · Blaze-Core +5

Name of the Vulnerable Software and Affected Versions: http4s versions prior to 0.21.17 http4s versions prior to 0.22.0-M2 http4s versions prior to 1.0.0-M14 Description: The issue is related to the blaze-core library, which accepts connections unboundedly on its selector pool. This can lead to a...

PlayStation: Reflected XSS on transact.playstation.com using postMessage from the opening window

Report Summary: When transact.playstation.com loads it handles messages received from postMessage in the receiveMessageFromTransactClientService method. The only validation that is performed is to ensure that the referrer and origin match: javascript receiveMessageFromTransactClientService:...

Beijing Qingqi Technology Co., Ltd Ember APP has Denial of Service Vulnerability

Shimmering App for PC is a novel social software to make friends through watching movies together. There is a denial-of-service vulnerability in Ember APP, which can be exploited by attackers to cause a denial-of-service attack...

@love-open-source/ember-slider (>=0.0.2, <=1.1.10), broccoli-compass-compiler (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2020-7635 via compass-compile (0.0.1)

compass-compile NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on compass-compile and may be impacted: - @love-open-source/ember-slider =0.0.2, =0.0.1, =0.1.0, =0.5.0 Source cves: CVE-2020-7635 Source advisory:...

Malicious Package

Overview Version 1.0.8 of ember-power-timepicker contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your...