1523 matches found
Out-Of-Bound Reads
Wavpack is vulnerable to out-of-bound reads. The vulnerability exists in WavpackPackSamples function of file src/packutils.cwhich allows an attacker to create a malformed WAV file with a high sample rate which causes a head out of bounds error crashing the program...
MSM 路径遍历漏洞
MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...
Fedora: Security Advisory for golang-k8s-sample-apiserver (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-github-prometheus-tsdb (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-k8s-sample-cli-plugin (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: golang-k8s-sample-controller-1.22.0-4.fc36
This package implements a simple controller for watching Foo resources as defined with a CustomResourceDefinition CRD...
[SECURITY] Fedora 36 Update: golang-k8s-sample-cli-plugin-1.22.0-4.fc36
This package implements a single kubectl plugin for switching the namespace t hat the current KUBECONFIG context points to. In order to remain as indestructive as possible, no existing contexts are modified...
[SECURITY] Fedora 36 Update: golang-k8s-sample-apiserver-1.22.0-5.fc36
Demonstration of how to use the k8s.io/apiserver library to build a functional API server...
[SECURITY] Fedora 36 Update: golang-github-prometheus-tsdb-0.10.0-8.fc36
Package Tsdb implements a time series storage for float64 sample data...
The stable ctoken underlying price quote could be manipulated
Lines of code...
Malicious Package
Overview sample-mini is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
MAL-2022-5732 Malicious code in refocus-sample-generator-template-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631548c717c3bbe8a8db0c1da07900bc6e8e906501e5ceb3a4c850a7f33351b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in refocus-sample-generator-template-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631548c717c3bbe8a8db0c1da07900bc6e8e906501e5ceb3a4c850a7f33351b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3020 Malicious code in ffdc-corporate-banking-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08472bfd3240403d8d2393bd762ea64b2fadc1969b830b814cd09783957c3481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5249 Malicious code in paypay-sample-ecommerce-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b31b1430f2e801aefc6f5a16cfbd3d5311746728695bc5d3ae462fbba5049d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1196 Malicious code in aws-delivlib-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e32519bdca9531e7178bf6e327829361c7be2d1a1e53a816e99a00325b28664d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aws-delivlib-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e32519bdca9531e7178bf6e327829361c7be2d1a1e53a816e99a00325b28664d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in evil-package-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b320e3dcc1537c8e96fd1d3a2bab84466c9c36e80222b7b2b147299b62029788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2900 Malicious code in evil-package-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b320e3dcc1537c8e96fd1d3a2bab84466c9c36e80222b7b2b147299b62029788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...