37 matches found
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
SummaryMicrosoft APM normalizes marketplace plugins by copying plugin components referenced in plugin.json into .apm/. The manifest fields agents, skills, commands, and hooks are attacker-controlled, but the implementation does not enforce that those paths remain inside the plugin directory. A...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8330-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8330-1 advisory. Thomas Beckers discovered that the JAXP component of OpenJDK 8 did not correctly...
EUVD-2020-1810
Malware in sbrugna...
EUVD-2020-7489
Malware in sbrugna...
EUVD-2022-41257
Malicious code in bioql PyPI...
EUVD-2023-47105
Malicious code in bioql PyPI...
EUVD-2023-38039
Malicious code in bioql PyPI...
EUVD-2025-18113
Malicious code in bioql PyPI...
EUVD-2023-38035
Malicious code in bioql PyPI...
EUVD-2022-50238
Malicious code in bioql PyPI...
EUVD-2022-50225
Malicious code in bioql PyPI...
EUVD-2023-47144
Malicious code in bioql PyPI...
EUVD-2023-37009
Malicious code in bioql PyPI...
EUVD-2023-45204
Malicious code in bioql PyPI...
EUVD-2023-47143
Malicious code in bioql PyPI...
EUVD-2023-47134
Malicious code in bioql PyPI...
EUVD-2022-50234
Malicious code in bioql PyPI...
EUVD-2023-38041
Malicious code in bioql PyPI...