Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation // source: https://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because...