MAL-2025-1463 Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system for enterprise resource management allows a perpetrator to gain unauthorized access to protected information and to modify, add, or delete data.

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system, which manages enterprise resources, stems from a lack of mechanisms for verifying data sources. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

MAL-2024-9260 Malicious code in ws-api-typescript-infra (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 307f2e541390b49f3169786119b7f694fa2a2da04848f23037e9e101c4cefa85 Any computer that has this package installed or running...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 1 (6.2.1-57)

This update provides security, stability, and performance fixes. Vulnerability id: VSTOR-88709 Network and disk information is missing in hciinfo.disks due to a race. Vulnerability id: VSTOR-89823 VMs are in the shutoff state after upgrading the libvirt package. Vulnerability id: VSTOR-90644 An...

Chef Infra Client SEoL (17.x)

According to its version, Chef Infra Client is 17.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Chef Infra Client SEoL (16.x)

According to its version, Chef Infra Client is 16.x or earlier. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVE...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 6 (6.1.1-52)

This update provides stability fixes. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot traceback. Vulnerability id: VSTOR-87057, VSTOR-87531, VSTOR-89251 Stability fixes for the hypervisor. Vulnerability id: VSTOR-89300 Fixed an issue with calculating storage usage...

Fedora 40 : firmitas (2024-71ef04b872)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-71ef04b872 advisory. Cryptography v42 is the new thing. Please follow the steps provided here https://github.com/fedora-infra/firmitas/blob/main/README.md for testing. References...

Chef Infra Client Installed (Unix)

Binary data chefinfraclientnixinstalled.nbin...

Chef Infra Client Detection

Binary data chefinfraclientwebdetect.nbin...

Chef Infra Server Detection

Binary data chefinfraserverwebdetect.nbin...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: temporal-server, chartmuseum, kubevela, prometheus-beat-exporter-fips, prometheus-postgres-exporter, doppler-kubernetes-operator, cadvisor, certificate-transparency-fips, fuse-overlayfs-snapshotter, certificate-transparency, flux-notification-controller,...

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 5 (5.4.4-148)

This update provides stability and performance improvements. Vulnerability id: VSTOR-77435, VSTOR-77436 Performance improvements in the Cinder service in huge clusters. Vulnerability id: VSTOR-78255 Prevented installation of packages that were not downloaded completely. Vulnerability id:...

CVE-2023-47279

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...

CVE-2023-47207

In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges...

payment.infra-lab.de Cross Site Scripting vulnerability OBB-3768074

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in le-core-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfbfa43ffabcf67af8f424825487f1ab613517f6605ccaf3a3d7f846b67221d7 The OpenSSF Package Analysis project identified 'le-core-infra' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1541 Malicious code in le-core-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfbfa43ffabcf67af8f424825487f1ab613517f6605ccaf3a3d7f846b67221d7 The OpenSSF Package Analysis project identified 'le-core-infra' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...