Constallation has pods exposed to peers in VPC

Impact Cilium allows outside actors world entity to directly access pods with their internal pod IP, even if they are not exposed explicitly e.g. via LoadBalancer. A pod that does not authenticate clients and that does not exclude world traffic via network policy may leak sensitive data to an...

Malicious code in trip-component-platform-online-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2b1894dd696dfb0e732a29e63d51abc46571ac2e0b0528d22359a070066b65d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1255 Malicious code in deprecation-silencer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51728830d7aed5b2134c0a91306e13560b271e8508376b3364616e35473898e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1265 Malicious code in viiiivek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55cac2c796a655b4203b015952598ff85be425c2e7b0d0fd4ca5f15da45cb322 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1261 Malicious code in trip-component-platform-online-goto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9bf43d6e49697b8f9e4d87c7cc739e1b31a2db5132fabce880c79cb4d1fd860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-18455 · Unknown · Vertaai/Modeldb

Name of the Vulnerable Software and Affected Versions: vertaai/modeldb affected versions not specified Description: The issue is related to a path traversal attack due to improper sanitization of user-supplied file paths in the file upload functionality. Attackers can exploit this by manipulating...

The vulnerability in the Intel oneAPI Toolkit’s software development tools relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability in the Intel oneAPI Toolkit development tools relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Malicious code in @lbnqduy11805/bookish-sniffle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95228871b0d604b7e64f4bb155e928331863408ffab79af790ee8353994622b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1221 Malicious code in @lbnqduy11805/miniature-garbanzo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcffefda213d3086dea5171af4cf2ac346c9339aded3010d0b328552ff27db66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1222 Malicious code in @lbnqduy11805/miniature-train (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2b8f13c15c44f99ee06b68946d7ed74786ca71b3c59f8caf08b2e61dafcd9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1218 Malicious code in @lbnqduy11805/friendly-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802b2dcf0e836c6a955cab90d444fba0aac8f4b098f5b7b1e19e1ab2b6fa3b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/shiny-rotary-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8ddda17313c540b777f7757d4d61d097a7eb003234cc5c4096ee03e5bd7b73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/urban-octo-adventure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d937d187bef01b51396d89982c93f0a036dba08d273eb1b30e653e6536752d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1237 Malicious code in @lbnqduy11805/studious-octo-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c073697c9ccab5e44be0c257384fa4907147f96dda92c23b1c611c01e67788cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1231 Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1234 Malicious code in @lbnqduy11805/special-funicular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e510788258c2e96a7ed65aec022cdbf449160441eb8756af374bb6c46e8b313 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1248 Malicious code in benjimain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81874f877a599ba4cd7f60d6888ff32a9768be0126b292e92f2b1716c2b88135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

zcap 安全漏洞

zcap is an open source reference implementation library for linked data functions from Digital Bazaar. A security vulnerability exists in zcap versions prior to v9.0.1, which stems from a security issue with the expiration check in Incomplete expiration that allows calls outside of the expected...

PT-2024-2949

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved ACX Series devices versions 23.1R1-EVO through 23.2R2-EVO Description A Cleartext Storage in a File on Disk issue allows a local, authenticated attacker with high privileges to read all other users' login...

Malicious code in tokenaddress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025a8419e068972440e8ce7318279901ab845fea1c593ecc34fda8d7f59122d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...