MAL-2024-7064 Malicious code in puredocx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c68b9e064d9802a7704f5f3429aae0fe87fd4d8f5cfbd9053e21b59036c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7063 Malicious code in djs14-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9329c7c1624c544e7762bb63fe25c7bbbb849bf3e0f38e8793138140d1d9ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7062 Malicious code in check-credit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeaf8d20bbaa95c39cf1458d9aa8469006eee9ab9ef2202bdaf1757873c80468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7066 Malicious code in viona-atm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e4f8f45815fbf187f1a9029ae5a5a432aa518eab883ecec21dbed96d6eecac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an information...

Savignano Software Solutions S/Notify Security Breach

Savignano Software Solutions S/Notify is an email encryption program from Savignano Software Solutions, Germany. A security vulnerability previously existed in Savignano Software Solutions S/Notify version 4.0.2. An attacker exploited the vulnerability to manipulate a user's PGP key S/MIME...

Medium: python-jinja2

Issue Overview: Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application...

Excessive time spent checking DH keys and parameters

...

USN-6851-2 netplan.io regression

USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of a regression in netplan which caused systemctl enable to fail on systems where systemd is not running. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Andreas Hasenack...

GO-2024-2499 Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio

Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation in github.com/minio/minio...

MAL-2024-7051 Malicious code in @rfv/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54928ac42ea161e8755f8a229b9b544f2da2b72cb2492e0f83b8ebe678a8f819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7053 Malicious code in colors-names (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5c6b5ad54ce114c6a70ad40e75b6bcb8972eba01e9551c195ed7e38f3c9f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37282

CVE-2024-37282 affects Elastic Cloud Enterprise (ECE) where, under certain preconditions, an API key created with limited privileges could be used to create new API keys with elevated privileges. Affected versions are ECE after 3.0.0 and before 3.7.2. The mitigation is to upgrade to version 3.7.2...

Elastic Cloud Enterprise 3.7.2 Security Update (ESA-2024-18)

ECE Improper Authorization ESA-2024-18 It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges. Affected Versions: ECE versions after 3.0.0 and...

MAL-2024-7055 Malicious code in lnx-integrity-check-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2be1591ee055bb001b6d945290d1fd8e9d367bd1d7e1b96b0ab70031541cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7056 Malicious code in sol-web3-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kakao Piccoma Security Breach

Kakao Piccoma is a mobile application for reading manga by the Japanese company Kakao Piccoma. A security vulnerability exists in Kakao Piccoma versions prior to 6.20.0, which stems from the use of hard-coded API keys...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2024-1876)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that...

USN-6854-1 openssl vulnerability

It was discovered that OpenSSL failed to choose an appropriately short private key size when computing shared-secrets in the Diffie-Hellman Key Agreement Protocol. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service...

MAL-2024-1675 Malicious code in near-linkdrop-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff40b77a91a8e45cd8e9541c0872d1e97a5e365768e2e6f34550d24f8c02fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...