3794 matches found
MAL-2022-6192 Malicious code in sncicd-tests-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sncicd-tests-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in run-topologically (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 471eb5ddca3487842f083975bb29429d88aa8cb2b80a5492fe33e006c2579108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in helix-run-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3bbd6572566ee67b93b08556dbb6c301091b2feb4e310ab55697867517d602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Missing slippage protection for autocompounding auraBAL rewards into AURA
Lines of code Vulnerability details Impact Autocompounding auraBAL rewards into AURA requires multiple swaps auraBAL - BAL/ETH BPT - WETH - AURA within MyStrategy.harvest. The swaps are at risk of being front-run / sandwiched, resulting in a loss of funds. Since MEV is very prominent I think the...
Tenable Network Security Nessus操作系统命令注入漏洞
Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security. An operating system command injection vulnerability exists in Tenable Network Security Nessus version 10.1.3 and earlier versions, which can be exploited by an authenticated attacker to...
Illumina Local Run Manager Path Traversal Vulnerability
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager is vulnerable to a path traversal vulnerability that stems from an input validation error when...
Illumina Local Run Manager Information Disclosure Vulnerability
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...
Illumina Local Run Manager File Upload Vulnerability
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains a file upload vulnerability that could be exploited by an attacker to upload any file typ...
Illumina Local Run Manager 代码问题漏洞
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains a file upload vulnerability that could be exploited by an attacker to upload any file typ...
Illumina Local Run Manager 访问控制错误漏洞
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager is vulnerable to an access control error that could be exploited by remote attackers to gain...
Using ExtraRewardStashV2 In Angle Deployment Will Cause Gauge Rewards To Be Frozen
Lines of code Vulnerability details Note: This report aims to discuss the issue encountered when ExtraRewardStashV2 is used within Angle Deployment. There is also another issue when ExtraRewardStashV3 is used within Angle Deployment, but I will raise it in a separate report since ExtraRewardStash...
Illumina Local Run Manager
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Illumina Equipment: Local Run Manager LRM Vulnerabilities: Path Traversal, Unrestricted Upload of File with Dangerous Type, Improper Access Control, Cleartext Transmission of Sensitive Information 2...
Illumina Local Run Manager 路径遍历漏洞
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager is vulnerable to a path traversal vulnerability that stems from an input validation error when...
CISA Releases Security Advisory on Illumina Local Run Manager
CISA has released an Industrial Controls Systems Advisory ICSA detailing multiple vulnerabilities in Illumina Local Run Manager. Successful exploitation of these vulnerabilities may allow an unauthenticated malicious actor to take control of the affected product remotely and take any action at th...
Illumina Local Run Manager 代码注入漏洞
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Illumina Local Run Manager is vulnerable to code injection, which could be exploited by attackers to remotely upload and execute code at the operating system level...
Illumina Local Run Manager 安全漏洞
Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...
BathPair.sol#rebalancePair() can be front run to steal the pending rebalancing amount
Lines of code Vulnerability details function underlyingBalance public view returns uint256 uint256 pool = IERC20underlyingToken.balanceOfaddressthis; return pool.addoutstandingAmount; function removeFilledTradeAmountuint256 amt external onlyPair outstandingAmount = outstandingAmount.subamt; emit...
PT-2022-3459 · Pillow · Pillow
Name of the Vulnerable Software and Affected Versions: Pillow version 9.1.0 Description: The issue is related to a heap buffer overflow in the processing of invalid TGA image files. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected...
Routinator infinite loop vulnerability
NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a new child CA that only consists of anoth...