PT-2023-32787 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 affected versions not specified Description: The issue is related to improper error handling in a REST API resource, which could expose a server-side error containing an internal WSO2 specific package name in the HTTP response...

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2023-46454

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

Malicious code in daftar-situs-judi-slot-online-gacor-gampang-menang-2023 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 874ee3a246bc3bbd51e905fd836bf877f706ac1af5c87f99eea71cc299b975a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apepe - Enumerate Information From An App Based On The APK File

Apepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language... Installing / Getting started A quick guide of how to install and u...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Malicious code in beta-fhr-nxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d17d64e039783ffdcb641aab3eea7afee429e6a2b80ebb2556f96d8951beb39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jerry1319 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39c3e74d9394364350aac9f2396311212f3cf3e8704fb23daf2bca46a9e24227 The OpenSSF Package Analysis project identified 'jerry1319' @ 1.0.10 npm as malicious. It is considered malicious because: - The package execute...

Code injection

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...

Malicious code in @huoshanjiebai/ethereumjs-utill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7a36fccca657e26ff9ded801631d537ad159e26045c0be4de99b31d351e20d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-fallen-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31e79019d42645171a0a0457db1d85815664700b6a48f72e42d4ca92025f5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ms-atlas/datastudio-diagnostics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3f339799f51093d5209c8cdce0977b24869016867c813f0abcfc5143e81f921 The OpenSSF Package Analysis project identified '@ms-atlas/datastudio-diagnostics' @ 0.2.10 npm as malicious. It is considered malicious because...

Denial Of Service (DoS)

gitlab is vulnerable to Denial of Service DoS attacks. The regex used for package names is written in a way that makes execution time have quadratic growth based on the length of the malicious input string, resulting in an application crash...

Malicious code in @metronetinc/react-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60618ba400c79770b18a43c36d0b3b9723c5f4df204ac012d6aea96d17de5bdd The OpenSSF Package Analysis project identified '@metronetinc/react-component-library' @ 9.999.8 npm as malicious. It is considered malicious...

Malicious code in @hihihehehaha/vgujsonfrankfurtola (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97abddac90750ebdebe8b52bdb02e50b71a485c334f2d81943eb09ed0ad24749 The OpenSSF Package Analysis project identified '@hihihehehaha/vgujsonfrankfurtola' @ 2.5.0 npm as malicious. It is considered malicious because...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

KoodousFinder - A Simple Tool To Allows Users To Search For And Analyze Android Apps For Potential Security Threats And Vulnerabilities

A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param | description ---|-...

Malicious code in dow-load-all-systems-red-the-murderbot-diaries-1-by-martha-wells-online-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1310336028ba1b101dfb831b5c48a1243ad51d4e24a6453c3d99dce8cc107543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myattenuator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...