5024 matches found
Malicious code in investitsionnaia-platforma-finam-p2p-zil8cb0ii (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0f7ffb84c271562d5d11d1e496b4ab57ad68d9fd2d3196f82b59d0c028cdbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-C827-HFW6-QWVM
creationtimestamp| type| source ---|---|--- 2024-08-26 22:10:24+00:00| seen| https://t.me/cvedetector/4193...
CVE-2024-43806
Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...
GHSA-VMWR-MC7X-5VC3 vulnerabilities
Vulnerabilities for packages: ruby3.2-rexml, ruby, kube-fluentd-operator, jruby...
GHSA-9CMQ-M9J5-MVWW vulnerabilities
Vulnerabilities for packages: apache-nifi...
GHSA-2M96-52R3-2F3G vulnerabilities
Vulnerabilities for packages: logstash...
GHSA-XMRP-424F-VFPX vulnerabilities
Vulnerabilities for packages: atuin...
CVE-2024-43378 calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems
calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users who installed NixOS through the graphical installer who used manual disk partitioning to create a setup where the system was booted via legacy BIOS rather than UEFI; some disk partitio...
CVE-2024-43378 calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems
calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users who installed NixOS through the graphical installer who used manual disk partitioning to create a setup where the system was booted via legacy BIOS rather than UEFI; some disk partitio...
CVE-2024-43378
CVE-2024-43378 concerns calamares-nixos-extensions prior to version 0.3.17, where the installer’s legacy BIOS flow could leave the LUKS keyfile in plaintext in /crypto_keyfile.bin or in a CPIO archive attached to the NixOS initrd for partitions containing / or /boot. Red Hat and CVE records summa...
GHSA-Q7W8-72MR-VPGW vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui...
CVE-2024-43368
The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when pasting malicious code. This vulnerability is a bypass of the fix put in place for GHSA-qjqp-xr96-cj99. In pull request 1149, sanitation was added for Trix attachments with a text/html content type. However, Trix only checks the...
CVE-2024-43368 Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste
The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when pasting malicious code. This vulnerability is a bypass of the fix put in place for GHSA-qjqp-xr96-cj99. In pull request 1149, sanitation was added for Trix attachments with a text/html content type. However, Trix only checks the...
aiohttp < 3.10.2 Path Traversal Vulnerability - Windows
aiohttp is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aio-libsproject:aiohttp";...
GHSA-857Q-XMPH-P2V5 vulnerabilities
Vulnerabilities for packages: efs-utils...
Malicious code in taap-package-rates (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a091fd0dfdccc5b0d1b90cd2c62f2fae5153ff8d59fdcf5ce3ab3fabba89a484 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7999 Malicious code in uitk-react-calendar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea103fb47eaf7b83ad10f5bbba8f4806de1cf066e8fce87deef49cdb0526a7bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7958 Malicious code in frontend-static-props-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3f52abf232df0db4fc9cbe55d6234cff445cff215bbeb3e5a26a4f26b843a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7934 Malicious code in bankrate-iconographynope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65165568244766f03199d6a00e3a881bc6897aa9b5ce4a547059d6de1bb05ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...