MAL-2022-4630 Malicious code in mitui-util-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aca9dab97c8d77e171a9e1ab72e7dc1dd029fa2be829a9b6288f44c573a8133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2720 Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6702 Malicious code in twitch-intl-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a49497d061ccd8a96bad1ad74dcad3bb76aa2846232ed64696e7e3a1894083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twitch-intl-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54a49497d061ccd8a96bad1ad74dcad3bb76aa2846232ed64696e7e3a1894083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5650 Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-271 Malicious code in @feis-vanilla/cms-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5acba4a5007bbdb759150c8b21641818c0544b61fffec01d2ee2a06618e04606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1768-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1768-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block...

SUSE SLES12: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:1764-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1764-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2017-16654

An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read methods of these classes use a path and a locale to determine the...

SUSE SLES12: apache2-mod_php72 / php72 / php72-bcmath / php72-bz2 / etc (SUSE-SU-2022:1714-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1714-1 advisory. - Fixed filtervar bypass vulnerability bsc1197644. Tenable has extracted the preceding description block directly from the SUSE security...

GHSA-C49R-8GJ6-768R Symfony Directory Traversal

An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read methods of these classes use a path and a locale to determine the...

Symfony Directory Traversal

An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read methods of these classes use a path and a locale to determine the...

The vulnerability in the ext/intl/msgformat/msgformat_format.c component of the PHP language interpreter allows a attacker to cause a service failure.

The vulnerability of the ext/intl/msgformat/msgformatformat.c component of the PHP language interpreter arises due to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure by calling MessageFormatter::formatMessage...

automation-intl.com Improper Access Control vulnerability OBB-2265049

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Updated php packages fix bugs and security vulnerabilities

Updated php packages fix bugs and security vulnerabilities: Core: - Fixed bug 71876 Memory corruption htmlspecialchars: charset ' not supported. - Fixed bug 79146 cscript can fail to run on some systems. - Fixed bug 78323 Code 0 is returned on invalid options. - Fixed bug 76047 Use-after-free...

Fedora 31 : php (2020-32f9a2b308)

PHP version 7.3.15 20 Feb 2020 Core: - Fixed bug php71876 Memory corruption htmlspecialchars: charset ' not supported. Nikita - Fixed bug php79146 cscript can fail to run on some systems. clarodeus - Fixed bug php78323 Code 0 is returned on invalid options. Ivan Mikheykin - Fixed bug php76047...

The vulnerability of the Intl component in the Symfony software development and web application management platform allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Intl component in the Symfony software development and web application management platform exists due to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by...

intl-agday.caes.uga.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1005552 Security Researcher devl00p Helped patch 3023 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting intl-agday.caes.uga.edu...

Fedora 30 : php (2019-6350c4e21a)

PHP version 7.3.5 02 May 2019 Core: - Fixed bug php77903 ArrayIterator stops iterating after offsetSet call. Nikita CLI: - Fixed bug php77794 Incorrect Date header format in built-in server. kelunik EXIF - Fixed bug php77950 Heap-buffer-overflow in estrndup via exifprocessIFDTAG. CVE-2019-11036...