Malicious code in new-relic-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: falcoctl, timestamp-authority-fips, trillian, kubescape, wavefront-collector-for-kubernetes, crane, hubble-ui-backend-fips, secrets-store-csi-driver-provider-gcp, kubernetes-ingress-defaultbackend, trillian-fips, kubernetes-dashboard, kubernetes-csi-livenessprobe-fip...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: hello-world-golang, sbom-scorecard, docker-cli, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, dockerize, capslock, ytt, slsa-verifier, dagger, volume-modifier-for-k8s, nri-discovery-kubernetes, kube-logging-operator, nri-elasticsearch,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: hello-world-golang, sbom-scorecard, docker-cli, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, dockerize, capslock, ytt, slsa-verifier, dagger, volume-modifier-for-k8s, nri-discovery-kubernetes, kube-logging-operator, nri-elasticsearch,...

This Week in Spring - March 5th, 2024

Hi, Spring fans! Welcome to another exciting roundup of This Week in Spring! I expect many of you are reading this for the first time, especially with Facebook and Instagram being down. People have been exploring all the other lesser-known corners of the web, looking for their daily "doom scroll....

This Week in Spring - February 20th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 20th of February, 2024? I'm doing alright on this rainy 20th of Feburary here in San Francisco, and I hope you are too! We've got a ton of things to get into this week so let's dive right into it! Have y...

Information disclosure

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

PT-2024-14331 · Relic · Relic-Toolkit

Name of the Vulnerable Software and Affected Versions: Relic relic-toolkit version 0.6.0 Description: An issue in the cp bbs sig function allows a remote attacker to obtain sensitive information and escalate privileges. The issue is located in the relic/src/cp/relic cp bbs.c file of the Relic...

RELIC Security Vulnerabilities

RELIC is a modern research cryptography meta-toolkit open-sourced by relic-toolkit that emphasizes efficiency and flexibility. A security vulnerability exists in RELIC version 0.6.0. A remote attacker can exploit this vulnerability to obtain sensitive information and escalate privileges via the...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-51939

Relic relic-toolkit 0.6.0 is affected by CVE-2023-51939 due to a flaw in the cp_bbs_sig function in relic_cp_bbs.c. The vulnerability enables a remote attacker to obtain sensitive information and escalate privileges via cp_bbs_sig. Connected sources consistently reference the vulnerable function ...

CVE-2023-51939

An issue in the cpbbssig function in relic/src/cp/reliccpbbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cpbbssig function...

CVE-2023-36327

Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bngetprime function...

CVE-2023-36326

Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bngrow function...

CVE-2023-36327

Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bngetprime function...

CVE-2023-36326

Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bngrow function...

Integer overflow

Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bngrow function...

Integer overflow

Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bngetprime function...

PT-2023-25537 · Relic · Relic

Name of the Vulnerable Software and Affected Versions: RELIC versions before commit 421f2e91cf2ba42473d4d54daf24e295679e290e Description: The issue allows attackers to execute arbitrary code and cause a denial of service. This is due to an integer overflow vulnerability in the bn get prime...