5056 matches found
Malicious code in util-buffers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26051aff776c128248d32f414e8919c5c3482b654403e6cd39478705581ae697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in voting-client-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf794ee7b143c582d6e666fee322ea82e99f42c967869b76953c90e12821c6a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-934X-XQ38-HHQF
creationtimestamp| type| source ---|---|--- 2025-05-08 20:23:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15613...
GHSA-63XR-GVJV-R6XV
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15456...
GHSA-HCG3-Q754-CR77 vulnerabilities
Vulnerabilities for packages: tekton-chains, flux-helm-controller, containerd, openfga, flux-kustomize-controller, spegel, spiffe-helper, crossplane-provider-family-aws, metrics-server, crossplane-provider-sql, src-fingerprint, tempo, go-licenses, grafana-alloy, prometheus-pushgateway, thanos,...
GHSA-G4R8-MP7G-85FQ
creationtimestamp| type| source ---|---|--- 2025-05-06 20:30:48+00:00| seen| Telegram/PwjyiTDmMCV8n5O4H8WYZUui8x-G-PcEgC06QwyqI9Pyxio...
GHSA-VR93-4VX7-332P
creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15180...
Malicious code in vite-plugin-remove (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c140227f254912a428a31e6c185e24d4d4098ac222b63955f3f6e7024d69941d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-HX5V-J59Q-C3J8
creationtimestamp| type| source ---|---|--- 2025-05-05 14:20:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14865...
GHSA-7X3Q-G6GQ-F4MM
creationtimestamp| type| source ---|---|--- 2025-05-03 23:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14708...
Fedora 40 : ntpd-rs (2025-66b73d6c72)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...
GHSA-WH6W-3828-G9QF
creationtimestamp| type| source ---|---|--- 2025-05-02 13:15:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14474...
GHSA-MGVV-9P9G-3JV4
creationtimestamp| type| source ---|---|--- 2025-05-01 23:25:44+00:00| seen| https://gist.github.com/EliahKagan/c847476c5a1c15dac03b1ce9a010d2a1...
GHSA-6M8W-JC87-6CR7
creationtimestamp| type| source ---|---|--- 2025-05-01 20:16:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14399 2025-05-01 22:01:57+00:00| published-proof-of-concept| Telegram/0EwG4WR3ryD8YYpC8nymf37rvRJ9lNf57cFzRcn8wtN8JQ...
GHSA-RQ77-P4H8-4CRW
creationtimestamp| type| source ---|---|--- 2025-05-01 11:14:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14255 2025-05-13 19:31:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16215...
GHSA-85JJ-C9JR-9JHX vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-8262-PW2Q-5QC3
creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14125 2025-04-30 19:25:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114428551038906711...
audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)
mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...
GHSA-MQQQ-H2X3-46FR
creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14051 2025-04-30 16:07:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427772732716398...