CVE-2023-32253

CVE-2023-32253 affects the Linux kernel’s ksmbd subsystem. A deadlock is triggered by sending multiple concurrent session setup requests, which can lead to a denial of service. Provided sources consistently describe the issue in the ksmbd component and its DO S impact; no explicit exploit details...

CVE-2023-32256

The CVE-2023-32256 entry describes a race condition in the Linux kernel ksmbd component where a race between smb2 close and logoff on multichannel connections can cause a use-after-free. This affects the Linux kernel ksmbd implementation; the vulnerability details include the potential for a secu...

Malicious Package

Overview dhei-0731-pkg2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2023-32251

CVE-2023-32251 concerns the Linux kernel ksmbd (kernel SMB/CIFS server). All provided sources confirm a bypass of the built-in 5-second anti-brute-force delay during session setup, achieved via asynchronous requests. This bypass undermines an intended dictionary-attack mitigation and may allow at...

Malicious Package

Overview @sme-configs/karma-coverage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @video-platform/react-osd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @hypervector/hypervector-tbank-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

Malicious Package

Overview @hypervector/hypervector-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2023-2593

CVE-2023-2593: Linux kernel vulnerability in TCP connection handling causes memory not released after its lifetime, enabling unauthenticated network-based denial-of-service. Severity listed as CVSS v3.1 Base Score 5.9 (Medium); attack vector: NETWORK, user interaction: NONE, privileges required: ...

Malicious Package

Overview mimelib2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview webpack-server-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vite-simpleparse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview stream-loggers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview real-socket-rt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview proc-log-cmd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview node-loggerx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview web3-rtc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cookie-loggo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview yaetia is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview storybook-core-core-server-presets-0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...