MAL-2022-2912 Malicious code in example-rust (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ea3b88110c6d99f6f13c45a70f1a3a66f9c32da09f15db73f1a166c2cbfa080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2908 Malicious code in example-api-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92cf52bf9fd875a949582d7218264ea38aa4c0c9d004d6b25af3c3d7312c1568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2913 Malicious code in example-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67077359006aa50f08c2757c83cc757f06c0b0817b3beb029ce4f6e823236c03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.natw.secret_store_example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 463e048fde06221b11a09d5adad57cf8cf962088146ed6d930f7ea830b2ecba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3863 Malicious code in intercom-react-native-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1fcd283f1ce396af81c959bb56b8fd32a56f22617596e78bebdaf08d500a1b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2375 Malicious code in dd-sdk-reactnative-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43af4d12510523dde9f54d71b7b01cf7331b60e5cb78a8bfeb59e6d733b0bb53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app-example-sentiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b7fe142d995f89d7e4cb6cc9585bcc24846648d205001e656821dd679fa86a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app-example-stream-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e9f3353290a0e3d5d5f6bed57d55942007d8c0954f913321c83cb3376333498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

io.fabric8.examples:camel-drools-example (>=1.1.0.beta1, <=1.1.0.beta4) potentially affected by CVE-2021-41411 via org.drools:drools-core (6.1.0.beta2)

org.drools:drools-core MAVEN version 6.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - io.fabric8.examples:camel-drools-example =1.1.0.beta1, =1.1.0.beta4 Source cves: CVE-2021-41411 Source...

org.drools:cdi-example (6.0.0.cr1), org.drools:cdi-example-with-inclusion (6.0.0.cr1) +89 more potentially affected by CVE-2021-41411 via org.drools:drools-core (6.0.0.cr1)

org.drools:drools-core MAVEN version 6.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools:cdi-example 6.0.0.cr1 - org.drools:cdi-example-with-inclusion 6.0.0.cr1 -...

io.fabric8.examples:camel-drools-example (>=1.1.0.beta5, <=1.1.0.beta6), org.perfcake:perfcake (>=3.0, <=4.1) potentially affected by CVE-2021-41411 via org.drools:drools-core (6.1.0.beta3)

org.drools:drools-core MAVEN version 6.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - io.fabric8.examples:camel-drools-example =1.1.0.beta5, =3.0, =4.1 Source cves: CVE-2021-41411 Source advisory...

Exploit for OS Command Injection in Tenda Hg9_Firmware

CVE-2022-30023 Authenticated Command Injection on Tenda HG9 R...

OESA-2022-1704 runc security update

runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fixes: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where runc exec --cap created processes wit...

MAL-2022-6723 Malicious code in ual-reactjs-renderer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6791 Malicious code in universal-authenticator-library-js-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 634c9abec0578ad529a15e3faab7ef695e47e5a1b95299329e27a8ca7e00e22f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-42013 C implementation of the infamous Apache 2.4.50...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.fizzed:ninja-undertow (5.7.0.undertow1), com.manywho.sdk:sdk-example (>=2.0.0-beta-01, <=2.0.0-snapshot-66) +9 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.24.final)

io.undertow:undertow-core MAVEN version 1.3.24.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow 5.7.0.undertow1 - com.manywho.sdk:sdk-example =2.0.0-beta-01, =2.0.0-beta-01...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

org.apache.mina:mina-example (1.0.7), org.apache.mina:mina-filter-codec-netty (1.0.7) +5 more potentially affected by CVE-2019-0231 via org.apache.mina:mina-core (1.0.7)

org.apache.mina:mina-core MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - org.apache.mina:mina-example 1.0.7 - org.apache.mina:mina-filter-codec-netty 1.0.7 -...