MAL-2024-11714 Malicious code in stackstorm-runner-action-chain (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0cc9e6be890f15ba83b67af002dc0fdec59a68ebdd2696ab5168df443ed2dabf Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in stackstorm-runner-action-chain (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0cc9e6be890f15ba83b67af002dc0fdec59a68ebdd2696ab5168df443ed2dabf Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

SUSE-SU-2024:2574-1 Security update for nodejs20

This update for nodejs20 fixes the following issues: Update to 20.15.1: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass bsc1227560 - CVE-2024-22020: Fixed a bypass of network import restriction via data URL bsc1227554 - CVE-2024-22018: Fixed fs.lstat bypasses permission model bsc1227562 -...

Malicious code in cucumber-rake_runner (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4055 Malicious code in Be.Vlaanderen.Basisregisters.PrоjеctionHandling.Runner.Microsoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderen.Bаsisregisters.PrоjеctionHandling.Runner.Miсrosoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4109 Malicious code in Be.Vlaanderen.Bаsisregisters.PrоjеctionHandling.Runner.Miсrosoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlaanderen.Basisregisters.ProjectionHandling.Runnеr (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlaanderen.Bаsisregisters.ProjectioոHandling.Runnеr (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2422 Malicious code in github-runner-lambda-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in github-runner-lambda-syncer (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: pulumi, bank-vaults, argo-events, sigstore-scaffolding, rclone, sqlpad, tkn, zot, sops, kubescape, wal-g, druid, grafana-agent-operator, chezmoi, guac, py3-azure-identity, rekor, step-ca, timestamp-authority, velero, buildkitd, goreleaser, airflow, prometheus-operato...

CVE-2024-3924 Code Injection in huggingface/text-generation-inference

A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...

CVE-2024-3924 Code Injection in huggingface/text-generation-inference

A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...

BIT-GITLAB-2024-2874 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources...

UBUNTU-CVE-2024-2874

An issue has been discovered in GitLab CE/EE affecting all versions before 16.10.6, version 16.11 before 16.11.3, and 17.0 before 17.0.1. A runner registered with a crafted description has the potential to disrupt the loading of targeted GitLab web resources...

GitLab < 13.3.9 (CVE-2020-13350)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are =13.5.0, =13.4....

GitLab 1.0 < 13.1.3 / 13.2 < 13.2.3 / 13.3 < 13.3.1 (CVE-2020-13310)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial o...

RHEL 8 : ansible-runner (RHSA-2022:0108)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0108 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

A new malware campaign leveraged two zero-day flaws in Cisco networking gear to deliver custom malware and facilitate covert data collection on target environments. Cisco Talos, which dubbed the activity ArcaneDoor, attributed it as the handiwork of a previously undocumented sophisticated...