PT-2023-35869 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: isvce write coeff4x4 cavlc,...

globalindustrialmachinery.com Cross Site Scripting vulnerability OBB-3178628

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

libavc:svc_enc_fuzzer: Global-buffer-overflow in isvce_write_coeff4x4_cavlc

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6251399139950592 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcencfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

CVE-2022-21191

A flaw was found in global-modules-path. This issue may allow command injection via getPath due to missing input sanitization or other checks and sandboxes being employed to the getPath function...

The Menace of TrickGate Packer-as-a-Service Spreading Malware Globally

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary TrickGate has bundled several of the most well-known top-distribution malware families, including Trickbot, Maze, Emotet, REvil, CoinMiner, Cobalt Strike, Formbook, Remcos, AgentTesla, and many others...

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection

A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the extend function could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with...

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection

A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the extend function could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with...

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection

A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the extend function could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with...

Malicious code in karma-jasmine-i-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e549b03e79b04aa24627294bb5599da9fb989a712bfbe3a6048c97bed62778b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-548 Malicious code in karma-jasmine-i-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e549b03e79b04aa24627294bb5599da9fb989a712bfbe3a6048c97bed62778b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in karma-jasmine-i-global

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in yandex-global-state-controller

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in yandex-global-state-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6c4dba2b3e3c39b4ce832c2744f991230aee48e1a68f51b1dc4fd47dffb8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-984 Malicious code in yandex-global-state-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6c4dba2b3e3c39b4ce832c2744f991230aee48e1a68f51b1dc4fd47dffb8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview yandex-global-state-controller is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

CVE-2022-48066

An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie...

It’s Data Privacy Day: Here’s how to protect your data and become your own privacy champion

News, Security It’s Data Privacy Day: Here’s how to protect your data and become your own privacy champion Share January 27th, 2023 Hello readers! January 28 is Data Privacy Day – an annual celebration of all things data protection and online privacy! It’s an opportunity for businesses and users ...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-8, <=1.0), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-8, <=1.0) +2 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.9)

org.jenkins-ci.plugins:script-security MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-8, =0.1-beta-8,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=1.1, <=1.2), org.jenkins-ci.plugins.workflow:workflow-cps (>=1.1, <=1.2) +1 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.12)

org.jenkins-ci.plugins:script-security MAVEN version 1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =1.1, =1.1, =1.1, =1.2 Source...