Lucene search
+L

148 matches found

Github Security Blog
Github Security Blog
•added 2026/10/11 3:31 p.m.•21 views

Malicious code in btc-fee-estimator (RubyGems)

Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload opens a TCP connection to the hardcoded host 45.138.12.177 on...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/10/11 3:31 p.m.•10 views

Malicious Package

Overview btc-fee-estimator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/11 1:46 p.m.•10 views

Malicious code in btc-fee-estimator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload open...

5.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/10/11 1:46 p.m.•23 views

MAL-2026-17781 Malicious code in btc-fee-estimator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload open...

5.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•11 views

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2026_4064)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264064 advisory. postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing...

8.8CVSS8AI score0.01372EPSS
SaveExploits5References16
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•12 views

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2026_4063)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264063 advisory. postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing...

8.8CVSS7.5AI score0.01372EPSS
SaveExploits5References18
RedHat Linux
RedHat Linux
•added 2026/09/30 12:07 p.m.•14 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/28 6:08 a.m.•23 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/28 6:07 a.m.•23 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/28 6:07 a.m.•20 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/28 4:16 a.m.•19 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/28 4:09 a.m.•23 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 9:12 p.m.•22 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 5:12 p.m.•22 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 4:18 p.m.•21 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/23 8:09 a.m.•21 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/22 1:21 p.m.•23 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/22 12:25 p.m.•23 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/22 11:19 a.m.•20 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/22 9:24 a.m.•19 views

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

8.1CVSS6.7AI score0.00334EPSS
SaveExploits0References5
Rows per page
Query Builder