12 matches found
Malicious code in react-dynamic-table-compenent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55ead8b66faca1e08b2babafa252da2371b535c010a5c14d8b0d0e2a44aadf8 Package name misspells 'component' as 'compenent', a one-letter typosquat of react-dynamic-table-component. The package's postinstall script runs nod...
CVE-2024-5821
The vulnerability allows an attacker to access sensitive files on the server by confusing the agent with incorrect file names. When a user requests the content of a file with a misspelled name, the agent attempts to correct the command and inadvertently reveals the content of the intended file,...
PT-2024-7683 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-rc4 Description: The vulnerability is caused by the incorrect spelling of a function name in the RTAS function table, leading to failed reverse lookups and warnings. The PAPR spec spells the function name ...
Cybercrime Takes Advantage of 2023-Recession with Job-Themed Scams
Cybercrime Takes Advantage of 2023 Recession with Job-Themed Scams By Daksh Kapur · February 28, 2023 Figure 1 image from freepik.com and flaticon.com The current economic climate globally is grim because of the ongoing recession. In this environment, job-themed emails have become a prime target...
Fedora: Security Advisory for gtkspell3 (FEDORA-2022-6746739d52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: gtkspell3-3.0.10-12.fc36
GtkSpell provides word-processor-style highlighting and replacement of misspelled words in a GtkTextView widget as you type. Right-clicking a misspelled word pops up a menu of suggested replacements...
[SECURITY] Fedora 36 Update: gtkspellmm30-3.0.5-17.fc36
GtkSpell provides word-processor-style highlighting and replacement of misspelled words in a GtkTextView widget as you type. Right-clicking a misspelled word pops up a menu of suggested replacements...
AaveYield: Misspelled external function name making functions fail
Handle 0xngndev Vulnerability details Impact In AaveYield.sol the functions: liquidityToken withdrawETH depositETH Make a conditional call to IWETHGatewaywethGateway.getAWETHAddress This function does not exist in the wethGateway contract, causing these function to fail with the error "Fallback n...
BadKernel Remote Code Execution Vulnerability in 2345 Website Navigation and 2345 Android Browser
2345 URL Navigation for Android is a built-in optimized browser software, 2345 Ace Browser for Android is a mobile browser. 2345 Website Navigation for Android V6.3.1 and 2345 Ace Browser for Android V8.6 use the Chrome V8 engine. The vulnerability is due to the "observeacceptinvalid" exception...
How content-length of a HTTP response is handled when rewrite is in use on NetScaler
When using rewrite policy with priority 120 on NetScaler it can be noticed that Content-Length header is misspelled in the response. To alter this behavior we can use another rewrite policywith priority 100 that has an action that can never be true. Note: Priority 120 and 100 is taken as examples...
Google Chrome V8 Engine Remote Code Execution Vulnerability (BadKernel)
Google V8 JavaScript Engine is the United States Google Google company for the Chrome browser developed a set of open source JavaScript engine. A remote code execution vulnerability exists in Google Chrome V8 engine versions 3.20 to 4.2, due to the "observeacceptinvalid" exception type being...
Network Of 7K Typo Squatting Domains Drives Huge Traffic To Spam Web Sites
A report from Websense finds that spammers are cleaning up on misspelled domain names for prominent sites. A network of such typo squatting sites is driving millions of visitors to a Web site controlled by the spammers, making it one of the most traffic sites on the Internet. The report, on...