CVE-2024-42155

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42155 s390/pkey: Wipe copies of protected- and secure-keys

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of protected- and secure-keys Although the clear-key of neither protected- nor secure-keys is accessible, this key material should only be visible to the calling process. So wipe all copies of protected- or...

CVE-2024-42155

The CVE-2024-42155 issue affects the Linux kernel on s390 architectures, where the k ey material of protected- or secure-keys should not be visible to the caller. The vulnerability notes that all copies of protected- or secure-keys must be wiped from the stack even if an error occurs. CVSS data p...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that the plaintext of a protected or secure key should be cleared from the stack in the s390/pkey...

MAL-2024-7850 Malicious code in ent-widget-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7313a06ff628db941fa9330887fdea43ce979086e4ce11ef7d0c0041a9a0f9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7854 Malicious code in testalonimaurice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ad03064c65acf925c16881cf35e79cbd2aac0bda615b6793bdf329bdeccccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7849 Malicious code in ent-widget-marital-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa180de1470fe53212c4f3f441f00ace1397bbdbbe1bcdff01177cc3b33ba3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7848 Malicious code in ent-widget-dob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678884e9151ff96ceb375f20f44f7295ed0ea6aac32778e3bf10998c984ad2f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7851 Malicious code in income_access_npm_config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d9955aae12e69e264784bcf65382bde7741326c5841d4a06389474e6daa09b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7852 Malicious code in jayanta_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38d0a5bc5f220e995ba855c19cc2ae4c1279a34855c7775d4a4b04707b2cdd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7846 Malicious code in dagster-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54576094f59a2d3e54d3be79e476c3b5cc7903ff5c0d5248784ab89ffa4e1dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that when using the ecdh key exchange protocol, the privatekey may be overwritten by a new key, and...

Malicious code in ent-disclosure-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad8186c5ffb6eeb5929d98477018c7c949063258e6f46752fbfc116b676c0fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-41689

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WP...

MAL-2024-7808 Malicious code in webvisitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159cdba89b54a02d9180e3bccbdf71f34d84cd74a53c1a3eec0dc7955d7895d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7805 Malicious code in httpsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2e3678fb0fcd1e38fa8e38b706128b14d6cd88892b5d2eace1580f584baa8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7807 Malicious code in webjsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41cce5996b48499aa091e08036886fb6c4b75bad613669a6f278e24b01bc11d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smart-input-textarea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffba47b31768b1363d5fd651769eb8bcb3f1112ca6db601bd51c7c44ec58adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7798 Malicious code in smart-input-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d35a2894a65ccf5f422531f46846b2cc71d5e0e28a3e0d7b6e9ed1b0daa6a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7797 Malicious code in lol1234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b3ce428106be18ba286aa2669f39a4fb3e2002e6cee4ccdca452afed5c8841d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...