golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

MAL-2024-10685 Malicious code in tunnelagnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f592f3817d29f7eb7e8b935a808bc3bad4ac50bd013cca91c31cc5de22866cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10682 Malicious code in proxyagnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00c4785fc05575aa8761c65207ad5a96beeb5bcb2eb2073f1866788c9de6130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10679 Malicious code in graphql-yga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47f947ce34d135841426d54dbd431fafee589316d101ac561f402d69ff75316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10681 Malicious code in pasportt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd40a87fc63f541713d987c4b12787ff5dc7f3354a807076862b42c86d677a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10678 Malicious code in chrtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d0701ce2a2f37d64ab5cabf7620f130ffa8499080bfa3c3bb7b94cdd289b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

MAL-2024-10684 Malicious code in styledcomps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b781ebb0b45a144ec6fcef9fc79b3304f5420286bc6d38b2a73a0c21830194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10683 Malicious code in sazz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d92dbc3fe418eda55594a9daf2e211b0d4595e4d8eaa8559e9c430e20995eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10680 Malicious code in litecor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8de5087944e5861aed99f90c521ee559657882af3f3048fa1bae6415906160b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-internal-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cybele Software Thinfinity Workspace 安全漏洞

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 that stems from...

Medium: ecs-service-connect-agent

Issue Overview: Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's defaul...

CVE-2024-46889

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the applicati...

MAL-2024-10607 Malicious code in bitcor-mnemonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b64aa1479d9e5fae10ef50a34b24b32b9bb09f98fd3bc301e6954ef6bffe82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10608 Malicious code in bitcore-mnemic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a72a50d12427111f0b683bda37a019abbeeee63bc70ac6278b220df90b87991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10623 Malicious code in wavs-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23292d68d4faeef5d972ec10be124e29ba31892999b6d475b00b150885570d5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10619 Malicious code in monro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 104d28b7b321b5dbca66770dcfcb8cdf2033bd8a4e8c83cfd2669d5e2bdb54a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10611 Malicious code in blockypher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 092ea3353b7f268f366debbde3d21eb6915d7825c7967ce0fecc4f6d2f483c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10612 Malicious code in chanlink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c4370f8d1133d9a796dd12e74b00fc89de84b39804694edef24b43f73ed33d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...