CVE-2024-44260

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious app with root privileges may be able to modify the contents of system files...

MAL-2024-10249 Malicious code in offensive-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 893b805fad3e01a5b0c3843b799e418623c7ea7d1bc2cbcf04b513c650e3d151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10245 Malicious code in blueconic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57780e7491017a50d7070e7a4f4ae2a258b327c469373c4d7d2612f512fcecb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

CVE-2024-50023 net: phy: Remove LED entry from LEDs list on unregister

In the Linux kernel, the following vulnerability has been resolved: net: phy: Remove LED entry from LEDs list on unregister Commit c938ab4da0eb "net: phy: Manual remove LEDs to ensure correct ordering" correctly fixed a problem with using devm but missed removing the LED entry from the LEDs list...

DEBIAN-CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

UBUNTU-CVE-2024-49983

In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4extreplayupdateex to avoid double-free When calling ext4forcesplitextentat in ext4extreplayupdateex, the 'ppath' is updated but it is the 'path' that is freed, thus potentially triggering a double-free i...

UBUNTU-CVE-2024-49951

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmtindexremoved If mgmtindexremoved is called while there are commands queued on cmdsync it could lead to crashes like the bellow trace: 0x0000053D: listdelentryvalidorreport+0x98/0xdc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash in the Bluetooth MGMT subsystem mgmtindexremoved call...

MAL-2024-9434 Malicious code in wagmi-connectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1849feb5a54edcfb0734af9c632f95290165ddd026b3a748050d2b136f9d3fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9374 Malicious code in kald0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b0a25465a0ec47537a56aa181edb7f3959f7a20b971d8d6d388f89783cc590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9393 Malicious code in ssp5z6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61846c2bf8da47f6af8717ec27c39e7685f28065bc4daac90813d03f41dc6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9364 Malicious code in elk1yf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 471b28d9ba2a82d14b4dc81f5a18c4cbce414ac60e2f843c8023da9b01b639bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9388 Malicious code in new-al-bum-av-ailable-21031-its-a-big-daddy-thing-funka-zsdlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b46c361960608f6d3a9f73b38d5e9167514b06e760cb88b6144307a94420875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9337 Malicious code in ava-ilable-down-load-mp3-today-50529-lets-change-the-world-with-music-cx2zi-xhskuv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df195ac8737511909f9fe9908cbb3c0cc9287f38837903e901667ca3ac686141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rancher 安全漏洞

Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. A security vulnerability exists in Rancher versions prior to 2.7.14 and prior to 2.8.5, which stems from a failure to automatical...

MAL-2024-9223 Malicious code in duckc2-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ccae9bda706300a8078341f64a00c3eeb0dc539eb2d138274eb7b41487169a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1728580597 python3: Fix of 2 CVEs

CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing '-quoted' cookie values with backslashes...

MAL-2024-9258 Malicious code in wassup-shiva (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0899fc457c77b483e51bf66f4a0c586cfa9ad8c89be4ae2541efd3bc435a09d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9130 Malicious code in bcsgb0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfcb4c38c6f16fbc50c3efb3401f855ea4cad84cdaf68c9badd88e80a581e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...