rsync: Path traversal vulnerability in rsync

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the --inc-recursive option, a lack of proper...

Security Bulletin: Oracle Outside In Technology (OIT) Security Vulnerabilities - July 2024

Summary Oracle Outside In Technology OIT Security Vulnerabilities CVE-2023-45853 and CVE-2023-52425 - Resolved in July 2024 Oracle OIT v8.5.7 BP3 p36705510 Vulnerability Details CVEID:CVE-2023-45853 DESCRIPTION: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer...

Malicious code in franklin-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ae87b2a01452220350394a2c4d2671059d9016de72c9ad7692fe35628357c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swerve-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b1194d6641e2147013bfade0bd7f7e18dec7eb509797c7d004c43e2886e02d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2169 Malicious code in edx-monitoring-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47b1fbec9c47eee15eb0547c1da8cc774108bd7cd6ae38a51cbe4dbfbe74941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alexpavlov--jquery-suggestable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f4773aee85f3d282a89ee413b5af4e93365981f67b821882709daf1d3cc6eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-custom-vue-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c516cbd7bda6255ce1f5a2b53f65970a24bb84aa4fc373041f73a440b8ae41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in link-outside-nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60138fd924427918d630cea0c05320160d12aa498336cbb87a174ee5eb2231db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.github-glitchenzo.nugetforunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2641b4718102c38479e074fc167269436aadb2ff01a5b703a1c5e0a02fa09d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2126 Malicious code in saml-sp-linking-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cefc3296ba659b91b026973376ed7a792b2c6c13d304e42d3742eddd7ae5ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.2d.animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9471b1667f7a99781cd6eb6b2981af2cb2d997202877c74068e9c501e52019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the fact that operations are performed outside the buffer in memory, allowing a malicious actor to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MAL-2025-2057 Malicious code in wefweg32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76caa25fdf514fc948cac0ea90e6ea22c814d04b780776b48478a94c0141230c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-sample-accept-a-card-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9df31417aaee6da47501df51c7b5f60b6d64285d452187a4165e703683ff2f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consumer-platform-global-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673a0b607ba1bc6ba23ef4cb90ce7b66e03db02b377733960c524cf6757b4c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-58042

In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedulework outside lock Move the hash table growth check and work scheduling outside the rht lock to prevent a possible circular locking dependency. The original implementation could...

Malicious code in behat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97effea6d055142393f3490e378f102fefa698c3b40c3f9d0d1e3fb46df23639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cosmos-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6053f00c9e4d23811647b64304eb319d346117494a434dad02865fe92a7e68e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sddst-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f7f35f1a8196669f72f5a2f8e6eba15a5ed1c4effe4b6629e9375d5d2301685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...