CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

CVE-2023-25586 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

Malicious code in newtesttocheckscanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ab43db32f51d45b83fb229cf4e2084b90f91beafb1a99342651c5693073ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-elements-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6568bed59e9443e40fb7b6c1799dfd3b4fa16bb1356a0dbec8a81249a75c59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2023-1693431257 Fix of 17 CVEs

Jammy update: v5.15.75 upstream stable release LP: 1996825 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size Jammy update: v5.15.61 upstream stable release LP: 1990162 // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check i...

Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in school-task-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68ee519ca1ab3166481b83f77e489872146bf1fb26bfe3678f16da5e5aa169a0 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in web3tool-rpc-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e90705834b05e292cabf72529d908456c4f3768af2b34604147b5ac6ec38363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superset-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc7141b3b668363f8f3073951d4253466c6ff87bd1212f3e6a7ac19609a5003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Users' registration amounts and contract balance state will be incremented incorrectly if the NFTBoostVault::_lockTokens() silently fails

Lines of code Vulnerability details Users can add and lock tokens to the NFTBoostVault contract to increase their voting power using addTokens function. This function will increment the contract's balance state and the user's registration.amount. Then, it will sync the voting power according to t...

Malicious code in hui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8adc0e25b0e392bbe784365d11891947d5c83abb33b0139293cb33f97b7347d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anup-candy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1b28b1796fa7c3129bcc7b1876c33e7f83c54d31ecae39ceb59f543d2194f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afterpay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d65821f7845bf39a23f9778347a76ca151807656e577af383b74fbef0eaf7c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Functions will always return success even if it is failed

Lines of code Vulnerability details Impact In NounsAuctionHouseFork.sol, safeTransferETH function is used to transfer ETH. File: nouns-contracts/contracts/governance/fork/newdao/NounsAuctionHouseFork.sol 272 function safeTransferETHaddress to, uint256 value internal returns bool 273 bool success,...

c-ares: Insufficient randomness in generation of DNS query IDs

A vulnerability was found in c-ares. This issue occurs when /dev/urandom or RtlGenRandom are unavailable, c-ares will use rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand, so it will generate predictable output...

Malicious code in fca-nguyen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325b1db59ef74456937dd3909ac729db47da97492af691b2b78469589bf5bd6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...