Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the execute function due to improper user-input sanitization. PoC js var root =require"abacus-ext-cmdline" root.execute'"& touch JHU &"' Remediation There is no fixed version for abacus-ext-cmdline. Credit: JHU...

GHSA-9P95-FXVG-QGQ2 simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

Design/Logic Flaw

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

PT-2022-35130 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak was identified in the ext4 fc record regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

Remote Code Execution (RCE)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting...

DEBIAN-CVE-2022-3970

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tifgetimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

Remote Code Execution (RCE)

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due t...

addons-linter (>=1.3.6 <=1.4.0), imagemin-gm (=2.0.1) +1 more potentially affected by CVE-2022-22984 +1 more via snyk (>=1.103.2 <=1.105.0)

snyk NPM version =1.103.2, =1.3.6, =1.4.0 - imagemin-gm =2.0.1 - web-ext =2.9.2 Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3038622...

addons-linter (>=1.3.6 <=1.4.0), imagemin-gm (=2.0.1) +1 more potentially affected by CVE-2022-24441 +1 more via snyk (>=1.103.2 <=1.105.0)

snyk NPM version =1.103.2, =1.3.6, =1.4.0 - imagemin-gm =2.0.1 - web-ext =2.9.2 Source cves: CVE-2022-24441, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3111871...

DEBIAN-CVE-2022-36191

A heap-buffer-overflow had occurred in function gfisomdoviconfigget of isomedia/avcext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242...

UBUNTU-CVE-2022-36191

A heap-buffer-overflow had occurred in function gfisomdoviconfigget of isomedia/avcext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC mp4box 2.1-DEV-revUNKNOWN-master, which stems from a heap buffer overflow in the gfisomdoviconfigget function in its isomedia/avcext.c:2490 component...

Malicious code in bfx-ext-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7cee42d2102a5c9632227caed184c8ba5ceea65b52d16e1aa97946f3eb2120a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1513 Malicious code in bfx-ext-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7cee42d2102a5c9632227caed184c8ba5ceea65b52d16e1aa97946f3eb2120a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-simplexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58542cc810bb96b49484d8217777c642feb4bc4333a4a74ac00bd27b1c2f142c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2936 Malicious code in ext-simplexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58542cc810bb96b49484d8217777c642feb4bc4333a4a74ac00bd27b1c2f142c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-iconv-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca41764ebc9b23bb68e27f052f70923177485babd831d5ea16ba901143a16926 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-iconv-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a9b9fa77d6e5d0e247b49cdc5c3f1285d8e834909891a98d1c123d28b1817f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2934 Malicious code in ext-iconv-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca41764ebc9b23bb68e27f052f70923177485babd831d5ea16ba901143a16926 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...