CVE-2020-16093

In LemonLDAP::NG aka lemonldap-ng through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used...

PT-2022-8581 · Unknown · Net::Ldaps +1

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.0.9 Description: The issue concerns the validity of X.509 certificates not being checked by default when connecting to remote LDAP backends. This is due to the default configuration of the Net::LDAPS module f...

PT-2022-11318 · Unknown · Lemonldap::Ng

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG version 2.0.13 Description: An issue was discovered in LemonLDAP::NG when using the RESTServer plug-in for a REST password validation service and the Kerberos authentication method combined with another method using the...

CVE-2022-30295 affecting package uclibc-ng 1.0.37-2

CVE-2022-30295 affecting package uclibc-ng 1.0.37-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-30295 affecting package uclibc-ng for versions less than 1.0.41-1

CVE-2022-30295 affecting package uclibc-ng for versions less than 1.0.41-1. An upgraded version of the package is available that resolves this issue...

Malicious Package

Overview pg-ng-popover is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in ng-browser-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d08b5cae5a0b2e184e29594a9bd4622f1f9b7956c69649fe171bae5a7d9ad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4842 Malicious code in ng-browser-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d08b5cae5a0b2e184e29594a9bd4622f1f9b7956c69649fe171bae5a7d9ad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ng-json-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c929b216a8bdc5a5892394c3d241adfcc149c0cf91d865d3a45dd312461aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4845 Malicious code in ng-json-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c929b216a8bdc5a5892394c3d241adfcc149c0cf91d865d3a45dd312461aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ng-focus-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619332f760bccc1c45e41a4fa2a462947232534acc6bdb2790a338451c6fd2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4844 Malicious code in ng-focus-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 619332f760bccc1c45e41a4fa2a462947232534acc6bdb2790a338451c6fd2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-478 Malicious code in @octopus-ng/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fee52bacbc657019ec4ae08930cbee6cc9bf5647fa4bb391956c63a738f9679 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41418

AriaNg v0.1.0v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights...

CVE-2021-41418

AriaNg v0.1.0v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights...

New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using "Magic Packets"

A new covert Linux kernel rootkit named Syslogk has been spotted under development in the wild and cloaking a malicious payload that can be remotely commandeered by an adversary using a magic network traffic packet. "The Syslogk rootkit is heavily based on Adore-Ng but incorporates new...

GHSA-PX35-882C-47HW Jenkins Warnings NG Plugin cross-site request forgery vulnerability

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

Jenkins Warnings NG Plugin cross-site request forgery vulnerability

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...

GHSA-WRR5-P265-7252 Jenkins Warnings NG Plugin Cross-site scripting vulnerability

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...

Jenkins Warnings NG Plugin Cross-site scripting vulnerability

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages...