Coldroot

Coldroot Mac OS Trojan made with love 3 i make this one cuz i believe we don't give Mac it's rights in this field :P so i decided to make this Trojan to Play with Mac users 😂 Tools i'm using Free Pascal 3.0 http://www.freepascal.org/down/i386/macosx.var Intellij IDEA 15 Ultimate...

catsup (>=0.3.8, <=0.3.11), freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) +7 more potentially affected by CVE-2026-54911 via ujson (1.33.0)

ujson PYPI version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - catsup =0.3.8, =0.0.021g3038804dirty, =1.13.0.dev1757972726, =1.13.2.dev1747412296, =1.13.0.dev2, =1.13.0.dev7, =0.0.2, =0.1.2, =0.6.2, =0.6.4 Source...

CVE-2022-31020

Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the pool-upgrade request handler in Indy-Node allows an improperly authenticated attacker to remotely execute code on nodes within the network. The pool-upgrade request...

EUVD-2020-28748

Malware in sbrugna...

EUVD-2020-0087

Malware in sbrugna...

EUVD-2022-0124

Malicious code in bioql PyPI...

EUVD-2022-0125

Malicious code in bioql PyPI...

CVE-2022-31006

indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable to be used for its intended purpose...

CVE-2020-11090

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...

CVE-2020-11093

Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a specific transaction which enables an attacker to make certain unauthorized alterations to the...

Hyperledger Indy's update process of a DID does not check who signs the request

Name Updating a DID with a nym transaction will be written to the ledger if neither ROLE or VERKEY are being changed, regardless of sender. Description A malicious DID with no particular role can ask an update for another DID but cannot modify its verkey or role. This is bad because: 1. Any DID c...

ledger-rest-api-dev (>=0.1.9, <=0.1.10) potentially affected by CVE-2020-11093 via indy-node (1.0.28)

indy-node PYPI version 1.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on indy-node and may be impacted: - ledger-rest-api-dev =0.1.9, =0.1.10 Source cves: CVE-2020-11093 Source advisory: GHSA-WH2W-39F4-RPV2...

ledger-rest-api-dev (>=0.1.9, <=0.1.10) potentially affected by CVE-2020-11093 via indy-node (1.0.28)

indy-node PYPI version 1.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on indy-node and may be impacted: - ledger-rest-api-dev =0.1.9, =0.1.10 Source cves: CVE-2020-11093 Source advisory: OSV:GHSA-WH2W-39F4-RPV2...

GHSA-WH2W-39F4-RPV2 Hyperledger Indy's update process of a DID does not check who signs the request

Name Updating a DID with a nym transaction will be written to the ledger if neither ROLE or VERKEY are being changed, regardless of sender. Description A malicious DID with no particular role can ask an update for another DID but cannot modify its verkey or role. This is bad because: 1. Any DID c...

indy-credx (>=0.2.0, <=0.3.1), indy-data-types (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2024-21670 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2024-21670 Source advisory: OSV:GHSA-R78F-4Q2Q-HVV4...

indy-credx (>=0.2.0, <=0.3.1), indy-data-types (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2024-22192 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2024-22192 Source advisory: OSV:GHSA-6698-MHXX-R84G...

indy-data-types (0.6.0) potentially affected by CVE-2022-31021 via anoncreds-clsignatures (0.1.0)

anoncreds-clsignatures CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on anoncreds-clsignatures and may be impacted: - indy-data-types 0.6.0 Source cves: CVE-2022-31021 Source advisory: OSV:GHSA-2Q6J-GQC4-4GW3...

indy-credx (>=0.2.0, <=0.3.1), indy-data-types (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2022-31021 via ursa (>=0.3.6, <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2022-31021 Source advisory: GHSA-2Q6J-GQC4-4GW3...

indy-data-types (0.6.0) potentially affected by CVE-2022-31021 via anoncreds-clsignatures (0.1.0)

anoncreds-clsignatures CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on anoncreds-clsignatures and may be impacted: - indy-data-types 0.6.0 Source cves: CVE-2022-31021 Source advisory: GHSA-2Q6J-GQC4-4GW3...

org.apache.camel:camel-infinispan (3.0.0-m4), org.apache.camel:camel-infinispan-starter (>=3.0.0-m4, <=3.0.0-rc1) +138 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.4.15.final)

org.infinispan:infinispan-client-hotrod MAVEN version 9.4.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.apache.camel:camel-infinispan 3.0.0-m4 -...