8501 matches found
Malicious code in load-date (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5e61507806967bd7bdac762e3f0f48883157def37151eacca646713cd2fc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in load-image-exif (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4338 Malicious code in load-image-exif (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4339 Malicious code in load-image-ios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in load-image-ios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in load-image-meta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4340 Malicious code in load-image-meta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ardoq-sheet-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1083 Malicious code in ardoq-sheet-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ffe4a6b987be146cd7315473d74b684d40acd0755edcb6f2f6f08398473ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2636 Malicious code in dynamic-load-sticky-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dynamic-load-sticky-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
...
Security update for caddy (moderate)
openSUSE Security Update: Security update for caddy Announcement ID: openSUSE-SU-2022:10007-1 Rating: moderate References: 1200279 Cross-References: CVE-2022-297182 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update f...
Goreplay - Open-Source Tool For Capturing And Replaying Live HTTP Traffic Into A Test Environment In Order To Continuously Test Your System With Real Data
GoReplay is an open-source network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring and detailed analysis. About As your application grows, the effort required to test it also grows exponentially. GoReplay offers you the simple idea of reusing...
OPENSUSE-SU-2022:10007-1 Security update for caddy
This update for caddy fixes the following issues: Update to version 2.5.1: Fixed regression in Unix socket admin endpoints. Fixed regression in caddy trust commands. Hash-based load balancing policies iphash, urihash, header, and cookie use an improved highest-random-weight HRW algorithm for...
CVE-2022-25805
An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...
IGEL Universal Management Suite 安全漏洞
The IGEL Universal Management Suite IGEL UMS is a single management solution from IGEL Germany. It can be used for up to tens of thousands of endpoints running IGEL OS. A security vulnerability exists in IGEL Universal Management Suite UMS version 6.07.100, which originates from the transmission ...
Identifying Cloud Waste to Contain Unnecessary Costs
Cloud adoption has exploded over the past decade or so, and for good reason. Many digital transformation advancements – and even the complete reimagination of entire industries – can be directly mapped and attributed to cloud innovation. While this rapid pace of innovation has had a profound impa...
Arbitrary Command Execution
jmespath is vulnerable to arbitrary command execution. An attacker is able to inject and execute arbitrary commands due to the unsafe usage of JSON.load where JSON.parse is preferable...