75 matches found
MAL-2024-1592 Malicious code in ing-feat-lu-luxtrust-token-authentication (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d7c8b06f4e363cde4609c5bb2971268a310ec0ec691464f7c1159191f308b8c The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-token-authentication' @ 200.0.1 npm as malicious. It is considered malicio...
MAL-2024-1591 Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e84b6fcb318d2b4cf4fc650d67ffb94a0622eb47d6b88e8662bdb6b2dc62930 The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-stick-authentication' @ 200.0.1 npm as malicious. It is considered malicio...
CVE-2024-26614
creationtimestamp| type| source ---|---|--- 2024-03-11 19:27:28+00:00| seen| https://t.me/ctinow/204982 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
[SECURITY] Fedora 40 Update: vecmath1.2-1.14-36.fc40
This is an unofficial implementation java source code of the javax.vecmath package specified in the JavaTM 3D API 1.2 . The package includes classes for 3-space vector/point, 4-space vector, 4x4, 3x3 matrix, quaternion, axis-angle combination and etc. which are often utilized for computer graphic...
CVE-2024-26586
creationtimestamp| type| source ---|---|--- 2024-02-22 18:53:39+00:00| seen| https://t.me/ctinow/191009 2024-02-23 15:11:29+00:00| seen| https://t.me/ctinow/191795 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
espace2001.lu Improper Access Control vulnerability OBB-3845285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cs7.lu Improper Access Control vulnerability OBB-3845236
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-52307
Stack overflow in paddle.linalg.luunpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage...
PT-2024-14514 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in paddle.linalg.lu unpack that can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to 2.6.0, update to...
MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
USN-6003-1 emacs24 vulnerability
Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this issue to execute arbitrary commands...
Wordpress Plugin cp-polls SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...
Malicious Package
Overview ing-orange-lu-luxtrust is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
[SECURITY] Fedora 34 Update: lapack-3.9.0-7.fc34
LAPACK Linear Algebra PACKage is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizatio...
connieluproperties.com Cross Site Scripting vulnerability OBB-2151952
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
GHSA-6HFQ-H8HQ-87MF HTTP Request Smuggling in hyper
Summary hyper's HTTP server code had a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the request payload boundary different...
LU Master 6.0 official version has dll hijacking vulnerability
LU Master is a free system tool software in China. A dll hijacking vulnerability exists in LU Master 6.0 official version. An attacker can exploit this vulnerability to execute malicious code...
XStream can be used for Remote Code Execution
Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...
GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution
Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...
lu.theconstructionjob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-971839 Security Researcher 0xrocky Helped patch 1796 vulnerabilities Received 7 Coordinated Disclosure badges Received 5 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting lu.theconstructionjob.com...