8826 matches found
Malware in o2-ionic-image-loader-v7
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in o2-ionic-image-loader
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in o2-ionic-image-loader-v7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in o2-ionic-image-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d248abb658f1d8182b04e7135dedf8d2d25735b9f551142b202be9044280580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Red Hat Shim Security Breach
Red Hat Shim is a simple software package from Red Hat. It is intended to be used as a first-stage boot loader on UEFI systems. A security vulnerability exists in Red Hat Shim that stems from an out-of-bounds read issue, which could result in the exposure of sensitive data during the system boot...
CVE-2022-48622
In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...
PT-2024-15922
Name of the Vulnerable Software and Affected Versions van der Schaar LAB synthcity version 0.2.9 Description A critical issue has been found in the function load from file of the component PKL File Handler, leading to deserialization. The attack may be launched remotely. The vendor was contacted...
serenity:FuzzTIFFLoader: Crash in void Gfx::Detail::ExifOrientedBitmap<Gfx::Bitmap>::set_pixel<unsigned int>
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4568095444238336 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzTIFFLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7e880966b3e...
Publitas: CVE-2018-6389 exploitation - using scripts loader
An unauthenticated denial of service vulnerability in WordPress was discovered, tracked as CVE-2018-6389. By requesting a large number of JavaScript files through the load-scripts.php endpoint, an attacker could consume excessive resources on the server. This vulnerability could allow denial of...
Moderate: Red Hat Security Advisory: grub2 security update
An update for grub2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
GHSA-RHHJ-5436-95VF Code execution in Embedchain
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument...
ReDoS in Embedchain
The JSON loader in Embedchain before 0.1.57 allows a ReDoS regular expression denial of service via a long string to json.py...
GHSA-R67W-F99W-MGXJ ReDoS in Embedchain
The JSON loader in Embedchain before 0.1.57 allows a ReDoS regular expression denial of service via a long string to json.py...
CVE-2024-23732
The JSON loader in Embedchain before 0.1.57 allows a ReDoS regular expression denial of service via a long string to json.py...
CVE-2024-23731
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument...
PYSEC-2024-8
The JSON loader in Embedchain before 0.1.57 allows a ReDoS regular expression denial of service via a long string to json.py...
Design/Logic Flaw
The JSON loader in Embedchain before 0.1.57 allows a ReDoS regular expression denial of service via a long string to json.py...
Design/Logic Flaw
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument...
