7516 matches found
Malicious code in mobile-auth-library-react-native (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2667 Malicious code in mobile-auth-library-react-native (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in cameo-react-native-share-story (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1858 Malicious code in cameo-react-native-share-story (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in axle-react-native-app-sync-client (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in axle-react-native-common-dependencies (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1793 Malicious code in axle-react-native-app-sync-client (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1794 Malicious code in axle-react-native-common-dependencies (npm)
--- -= Per source details. Do not edit below this line.=-...
This Week in Spring - June 25th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this I'm in beautiful Amsterdam, having visited with customers and spoken at a local Java User Group. Now I'm off to lovely London, UK. Last week I was in Krakow, Poland, for the amazing Devoxx PL event, and in Par...
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...
Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)
The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-037 advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling...
A Bootiful Podcast: Thomas Vitale, author of Cloud Native Spring in Action
Hi, Spring fans! In today's episode I'm thrilled to sit down with my friend and Cloud Native Spring in Action author Thomas Vitale. This episode was recorded live at the amazing Spring IO 2024 event...
Rootstock Labs: Crafted smart contract can take ~23 seconds to execute due to immense error string construction
The crafted smart contract can take approximately 23 seconds to execute due to the immense error string construction. The vulnerability was caused by the native contract's implementation, which constructed the entirety of the input message as a hex string for logging and throwing an exception. Th...
Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups
The Cyber Police of Ukraine has announced the arrest of a local man who is suspected to have offered their services to LockBit and Conti ransomware groups. The unnamed 28-year-old native of the Kharkiv region allegedly specialized in the development of crypters to encrypt and obfuscate malicious...
A Bootiful Podcast: Abdel Sghiouar, Cloud Native Developer Advocate at Google
Hi, Spring fans! Abdel Sghiouar is a senior Cloud Native Developer Advocate at Google, a co-host of the Kubernetes Podcast by Google and a CNCF Ambassador, and it was my pleasure to sit down with him at the amazing Spring IO event in Barcelona and catch up on all things Kubernetes and Google...
Identify sessions connected via Native Workspace App versus Receiver for Web (Browser)
Identify the sessions which are connected via Native Workspace App versus Receiver for Web Browser...
Apache Submarine SQL Injection Vulnerability
Apache Submarine is a cloud-native machine learning platform from the Apache USA Foundation. An SQL injection vulnerability exists in Apache Submarine Server Core, which stems from improper neutralization of the particular element used...
CVE-2024-31959
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in code execution...
Samsung Mobile Processor Security Vulnerability
SAMSUNG Mobile Processor is a family of mobile processors from the South Korean company Samsung SAMSUNG. A security vulnerability exists in Samsung Mobile Processor that stems from a lack of checks for native handle validation, which could lead to code execution...
