Malicious code in power-assert-plus (npm)

Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is obfuscator.io-encoded string-array + custom base64 alphabet and,...

Grub2 net_set_vlan Buffer Overflow DoS

The vulnerability of the netsetvlan function in the Network loader module of the Grub2 operating system is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

Multiple vulnerabilities in IDA Pro (CNVD-2014-09237)

IDA PRO abbreviation IDA Interactive Disassembler is an interactive disassembler. IDA Pro 6.6 and earlier versions contain several implementation vulnerabilities that could allow an attacker to take control of the affected system, a double-release in the kernel and a double-release error in the N...