OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...

CVE-2024-56084

An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...

CVE-2024-56084

An issue was discovered in Logpoint UniversalNormalizer versions prior to 5.7.0 that allows authenticated users to inject payloads while creating a Universal Normalizer. Due to improper neutralization of special elements used in a command (CWE-77 ), these payloads are executed, potentially leadin...

Logpoint Universal Normalizer 安全漏洞

Logpoint Universal Normalizer is a universal normalizer from the Danish company Logpoint. A security vulnerability exists in Logpoint Universal Normalizer versions prior to 5.7.0. An attacker could exploit the vulnerability to remotely execute code...

MAL-2024-6719 Malicious code in attribute-normalizer-extras (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in attribute-normalizer-extras (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in arabic-normalizer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6669 Malicious code in arabic-normalizer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Tenable Nessus Agent Metadata Normalizer

Binary data agentnormalizemetadata.nbin...

Malware in f0-normalizer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in f0-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59555a81498457e7dd566cb779db13702f1f1672fc7755c89cbb11a6c2d898b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8294 Malicious code in f0-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59555a81498457e7dd566cb779db13702f1f1672fc7755c89cbb11a6c2d898b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

uint128 changeAmount might overflow

Lines of code Vulnerability details Impact This issue is an edge case, that uint128 changeAmount could overflow, making the protocol fail for certain amount of swap. Proof of Concept Let's break down the changeAmount: 1. amountOut/amountIn 2. BASE27 3. normalizer File:...

Mageia: Security Advisory (MGASA-2023-0196)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-VR2X-7687-H6QV api-platform/core's secured properties may be accessible within collections

Impact Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON, which is enabled by default when installing API Platform. Custom serialization...

CVE-2023-25575: Secured properties may be accessible within collections

Impact Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON, which is enabled by default when installing API Platform. Custom serialization...

api-platform/core's secured properties may be accessible within collections

API Platform Core is the server component of API Platform: hypermedia and GraphQL APIs. Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON...

Introducing Microservices Patterns with Spring Integration

Hey Spring Community! I hope you are enjoying Spring One Essentials these days. The most exciting feature for me is an Observability which is spread throughout the Spring portfolio from now on. Nevertheless, today Id like to share with a project Im working on since holidays, where the mentioned...

Introducing Microservices Patterns with Spring Integration

Hey Spring Community! I hope you are enjoying Spring One Essentials these days. The most exciting feature for me is an Observability which is spread throughout the Spring portfolio from now on. Nevertheless, today I’d like to share with a project I’m working on since holidays, where the mentioned...

Malicious code in amount-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d09735973491e8bc50b7327031ed78e899206756947f1e87796071689767917d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...