102 matches found
VulnCheck KEV: CVE-2018-11770
From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...
EUVD-2018-0571
Malware in sbrugna...
EUVD-2019-0387
Malware in sbrugna...
EUVD-2022-3293
Malicious code in bioql PyPI...
EUVD-2022-2084
Malicious code in bioql PyPI...
EUVD-2022-5392
Malicious code in bioql PyPI...
EUVD-2022-2638
Malicious code in bioql PyPI...
EUVD-2022-5745
Malicious code in bioql PyPI...
cassandra-mesos
This is a repository for the Cassandra-Mesos framework, which is a distributed database system that allows for the deployment of Apache Cassandra on Apache Mesos. The framework is designed to provide a scalable and fault-tolerant way to run Cassandra on Mesos, and it includes features such as...
Malicious code in deric-mesos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dac4c072355e0393baa39c72cbaf06d33a8ace488a5acb4051b9ccfb2a2ed75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1110 Malicious code in deric-mesos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dac4c072355e0393baa39c72cbaf06d33a8ace488a5acb4051b9ccfb2a2ed75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Photon OS 2.0: Mesos PHSA-2019-2.0-0141
An update of the mesos package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0141. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 1.0: Mesos PHSA-2017-0038
An update of the mesos package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid202844;...
Photon OS 2.0: Mesos PHSA-2019-2.0-0161
An update of the mesos package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Malicious code in mesos-term (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-589 Malicious code in mesos-term (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2018-11770
From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs vi...
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Watson AIOps version 3.6. Vulnerability Details CVEID:CVE-2018-8023 DESCRIPTION: Apache Mesos could allow a remote attacker to obtain sensitive information, caused by a timing attack in the JSON Web Token JWT implementation. By...
Yelp: Public Github Repo Leaking Internal Credentials
Summary: In Github I found some credentials to use in a mesos.apache.org Github: https://github.com/Yelp/Tron/blob/master/yelppackage/itestdockerfiles/mesos/mesos-secrets https://github.com/Yelp/Tron/blob/master/yelppackage/itestdockerfiles/mesos/mesos-slave-secret POC ss F2021070 F2021071 Login...
GHSA-95Q3-PPPP-R683 Crash when decoding malformed HTTP requests or malformed JSON payload
When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a...