Linux Distros Unpatched Vulnerability : CVE-2012-0217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and...

Linux Distros Unpatched Vulnerability : CVE-2011-1142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remo...

Malicious code in jaws-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef97004c02a81ddc0d6afb6b85005d92b395ba93911614fbabdd1ab2c1736de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in basic-data-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1226e5e77825d2e5d196dbb1155230067191bfad4c3777ba65b50ab5a95dc9e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vinothzomato-foremandns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91da1ea036e46f838dc1a3363e8472c6361e1a08bda6aa73fb22831159fbd379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sui-cctp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29b5e8f3f1a95ac872533b00563608aeb8925af6f289f6a5d77708faa801735e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Medium: python3

Issue Overview: The urllib.parse.urlsplit and urlparse functions improperly validated bracketed hosts , allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser. CVE-2024-11168 There ...

Malicious code in realtime-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a419d00d6726fcd2d97dfde72e8d41922e2fe0a0179c77beae95f697990241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wkndaemassetcompute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c407d8af3732f19844c82d8ebb0b97754b59b979b9db2ec82f002e136ca1486f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-13741

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pmuploadimage function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

Malicious code in yizhifabao63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e401203ed8c584cdb95319e5420fa866fc2bfc7c74af5da32079aec65289308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afip-example-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af458f37f8afe450febaa14d76f15345bc5fe0f83c274593a481ac82dcc0bad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Internet Bug Bounty: TLS client authentication can be bypassed due to ticket resumption

The TLS client authentication can be bypassed due to ticket resumption. The issue was that TLS session tickets were not properly isolated for multiple virtual hosts in one server. This allowed a ticket issued for one virtual host to be resumed at a different virtual host, circumventing client...

CVE-2022-23005

Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. The UFS Boot feature, as specified in...

CVE-2024-21103

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21116

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

Malicious code in external-adapters-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fb2f18c7015fcb8f30ee96a50ed46bc59f98370595754376e86ed37bc31e80 Any computer that has this package installed or running should be considered...

Malicious code in apple-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...