Malicious code in pb-ts-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9b35837a3cf72fbba62ab3098ec2b11f3a3532e261421c03538399d5f64751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11065 Malicious code in pb-ts-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9b35837a3cf72fbba62ab3098ec2b11f3a3532e261421c03538399d5f64751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pb-ts-gen

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

HPESBHF04735 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01085, UPLR2 - Intel UEFI Firmware Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.3008-09-2024 HPE Alletra 4120 - Prior to 2.3008-09-2024 HPE Alletra 4140 - Prior to 2.3008-09-2024 HPE ProLiant DL110 Gen11 - Prior to 2.3008-09-20...

HPESBHF04734 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Synergy, and Edgeline servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.3008-09-2024 HPE Alletra 4120 - Prior to 2.3008-09-2024 HPE Alletra 4140 - Prior to 2.3008-09-2024 HPE ProLiant DL110 Gen11 - Prior to...

Malicious code in xcasset-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-33992

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been resolved in the Linux kernel. The problem occurs when the snd hda gen add kctl function fails to allocate memory and returns NULL, leading to ...

MAL-2024-10597 Malicious code in para-gen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3d08fbd0f121caa044ad303a9e0c91c40edb96d35166f220961b594eda2aea3 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in para-gen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3d08fbd0f121caa044ad303a9e0c91c40edb96d35166f220961b594eda2aea3 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

CVE-2024-50107

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

CVE-2024-50107 platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

CVE-2024-50107 platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

Malware in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

HPESBHF04710 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01099, Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.3209-09-2024 HPE Alletra 4120 - Prior to v2.3209-09-2024 HPE Alletra 4140 - Prior to v2.3209-09-2024 HPE ProLiant DL110 Gen11 - Prior to...

Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11738 Malicious code in user-gen-agent-random (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22f729ba6b5abecacd2d94214cf0075ac0729fb59d4e9cc1cf6287a2bf6e2ab6 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

MAL-2024-11599 Malicious code in gen-user-random-agent (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e261c26a73604aac348f2df96e5b12b0817010a9a1bbc48ddfbe309915c697b Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

HPESBHF04716 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel or AMD Processor BIOS, Out-of-Bounds Write Vulnerability

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen 11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240930 HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240930 HPE...

Buffer underflow in base64decode

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include "utils.hpp" include // File under test include // Auxiliary headers include include include include include include if hasinclude include namespace fs = std::filesystem; else...