Fixed in Apache Tomcat 9.0.98

Important: Remote Code Execution via write enabled Default Servlet. Mitigation for CVE-2024-50379 was incomplete - CVE-2024-56337 The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 9.0.98 or later, users running Tomcat on a case insensitive file system with the...

Malicious code in qwilr-examples-create-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0bbec32dcccb555fb5667a8f1cb7f4973512ac8acbea5261a4ff7d14a952476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0209fe94e2a98b2966850b302c4c2dda331437ead2871a609a8677cdc85516fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9175 Malicious code in openai-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0209fe94e2a98b2966850b302c4c2dda331437ead2871a609a8677cdc85516fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9177 Malicious code in redis-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02766e4613356d0e36f10a314a6c3e8b1b712dc126813ac3beff0958cb22c71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redis-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02766e4613356d0e36f10a314a6c3e8b1b712dc126813ac3beff0958cb22c71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview redis-examples is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...

File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add

file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align the PE header...

openSUSE Security Advisory (SUSE-SU-2024:3078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in calculator-c08d6d50f5964131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6343baa8b5e97a91b02979723f28035221550addc225d0e3911916a51ef5ef37 Clearly research/pentesting examples containing reverse shell. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anythin...

MAL-2024-3127 Malicious code in tilled-exanmples (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3128 Malicious code in tilled-exanples (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3124 Malicious code in tilled-examples-test1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tilled-examples-test1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3122 Malicious code in tilled-exampels (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ember-nf-graph-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebe095668166c2fe0cab161db6eabfe48bbed4b707808733ac6315734dc651b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Deserialization of Untrusted Data in Clear Clearml

ClearML Exploit Script This repository contains a Python expl...

OPENSUSE-SU-2024:10678-1 cgal-demo-examples-devel-5.3-1.2 on GA media

These are all security issues fixed in the cgal-demo-examples-devel-5.3-1.2 package on the GA media of openSUSE Tumbleweed...

openSUSE 15 Security Update : qt6-networkauth (openSUSE-SU-2024:0138-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0138-1 advisory. - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString boo1224782. Tenable has extracted the preceding description block directly fro...

CVE-2024-29946

In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into...