apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-45034 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-45034 Source advisory:...

CVE-2024-8135

Summary: CVE-2024-8135 affects Go-Tribe gotribe (up to commit cd3ccd32...) with a vulnerability in the Sign function of pkg/token/token.go. The issue arises from manipulation of the config.key argument, which leads to hard-coded credentials. Reported in multiple feeds, the product uses continuous...

CVE-2024-8135

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

CVE-2024-8135: Use of Hard-coded Credentials

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

Malicious code in evil-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 366920f1b216795839a0a8533db122155f0c839032a67fdd6a33544179749a2c Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

cobras (>=2.1.8, <=2.2.4), example-pkg-in8utils (0.0.1) +3 more potentially affected by CVE-2024-40647 via sentry-sdk (0.12.3)

sentry-sdk PYPI version 0.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =2.1.8, =1.0.0, =1.0.43 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

CVE-2024-39909

KubeClarity is a tool for detection and management of Software Bill Of Materials SBOM and vulnerabilities of container images and filesystems. A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID. As it can be seen in...

CVE-2024-39909: Improper Neutralization of Special Elements used in an SQL Command

KubeClarity is a tool for detection and management of Software Bill Of Materials SBOM and vulnerabilities of container images and filesystems. A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID. As it can be seen in...

Malicious code in cli-pkg-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a7aae8c7f3c482a70cb9cd90ee7c66cdab49f87aea5f39075c02aef180ad54a The OpenSSF Package Analysis project identified 'cli-pkg-test' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

Malware in test-pkg-blabla

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1666 Malicious code in internal-udfc-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25708e4f5f0536339a12c9bf28e659c821359f2733ff51d193cd6d74443c3650 The OpenSSF Package Analysis project identified 'internal-udfc-pkg' @ 5.5.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in internal-udfc-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25708e4f5f0536339a12c9bf28e659c821359f2733ff51d193cd6d74443c3650 The OpenSSF Package Analysis project identified 'internal-udfc-pkg' @ 5.5.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-5098 Malicious code in duck-test-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in duck-test-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in malicious-pkg-demo (npm)

--- -= Per source details. Do not edit below this line.=-...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-25142 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-25142 Source advisory:...

Malicious code in test-pkg-blabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83b007683c452075ec2dfb23b7de20d38b8d28441ce63b4745fd114bba008a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for rust-uu_tee (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malware in pkg-lumina-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in scundev-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...