CVE-2021-21372

CVE-2021-21372 concerns Nimble, the Nim package manager. In Nimble releases before 1.2.10 and 1.4.4, the doCmd usage is vulnerable: an attacker can craft a malicious entry in the packages.json package list to trigger code execution. The advisory notes this as a vulnerable path via Nimble’s handli...

Nimble 信任管理问题漏洞

Nimble is an open source package manager for the Nim programming language. A trust management issue vulnerability exists in Nimble versions 1.2.10 and 1.4.4, which can be exploited by an attacker to deliver a modified list of packages containing malware packages, leading to untrusted code executi...

Researchers Spotted Malware Written in Nim Programming Language

Cybersecurity researchers have unwrapped an "interesting email campaign" undertaken by a threat actor that has taken to distributing a new malware written in Nim programming language. Dubbed "NimzaLoader" by Proofpoint researchers, the development marks one of the rare instances of Nim malware...

Researchers Spotted Malware Written in Nim Programming Language

Cybersecurity researchers have unwrapped an "interesting email campaign" undertaken by a threat actor that has taken to distributing a new malware written in Nim programming language. Dubbed "NimzaLoader" by Proofpoint researchers, the development marks one of the rare instances of Nim malware...

Nim Input Validation Error Vulnerability

Nim is a statically typed programming language from the Nim community. An input validation error vulnerability exists in versions of Nim prior to 1.2.6, which stems from a failure of the standard library asyncftpclient to check whether a message contains line breaks. No details of the vulnerabili...

CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

DEBIAN-CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

Code injection

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

UBUNTU-CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

CVE-2020-15690

CVE-2020-15690 affects Nim prior to 1.2.6, where the standard library asyncftpclient does not check for newline characters in messages. This can enable CRLF-like input handling issues in the FTP-related path, as described in multiple advisories referencing Nim’s asyncftpclient newline check omiss...

CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

CVE-2020-15690

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character...

Nim 注入漏洞

Nim is a statically typed programming language from the Nim community. An input validation error vulnerability exists in versions of Nim prior to 1.2.6, which stems from a failure of the standard library asyncftpclient to check whether a message contains line breaks. No details of the vulnerabili...

Nim Remote Command Execution Vulnerability

NIM Network Installation management is a functional module of the AIX operating system that provides an effective and fast method for the installation of the operating system and the maintenance of the software through the network. A security vulnerability exists in Nim version 1.2.4, which stems...

CVE-2020-15692

In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system...

CVE-2020-15692

In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system...

CVE-2020-15694

In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get.contentLength does not raise any error if a malicious server provides a negative Content-Length...

CVE-2020-15693

In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part of the URL provided in a call such as httpClient.get or httpClient.post, the User-Agent header value, or custom HTTP header names or value...