11989 matches found
Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
Impact The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when determining whether or not to include a truncated version of the original...
CGA-R68P-F5HC-GCCH
Bulletin has no description...
CGA-RFP7-V98R-27GV
Bulletin has no description...
MAL-2024-10161 Malicious code in sol-structs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...
MAL-2024-10133 Malicious code in python-guild (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e80e97d90a6fe86d94b3d80feac7f7f53e0eb1ee29320ebb7612cdf7a5449f3d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...
GO-2024-2936 PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase
PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase...
MAL-2024-10146 Malicious code in pytyon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e88db6ad57b1091a374c932c28502eb03c3cbb191976d0d45d3179953e26d44d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
MAL-2024-10069 Malicious code in openrea (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 feed5259de4613688d3df61d379566403b7a9e8981937c3b450a7cdc8a99e101 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
MAL-2024-10075 Malicious code in openseaa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5428b21b872ea57a73c1e7932fa333e90bb7c42f3a7b72f29569005158d1fc34 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
MAL-2024-10213 Malicious code in weeb3-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 40becddeae204dc62ec3b068dd7018b94f5a2b1ba4cdd9e68244602e06b5f257 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
Multiple vulnerabilities in TP-Link Omada system could lead to root access
The TP-Link Omada system is a software-defined networking solution for small to medium-sized businesses. It touts cloud-managed devices and local management for all Omada devices. The supported devices in this ecosystem vary greatly but include wireless access points, routers, switches, VPN devic...
CVE-2024-39298
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix handling of dissolved but not taken off from buddy pages When I did memory failure tests recently, below panic occurs: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8cee00 flags:...
CVE-2024-38306
In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios BUG Since v6.8 there are rare kernel crashes reported by various people, the common factor is bad page status error messages like this: BUG: Bad page state in...
MAL-2024-7046 Malicious code in workarea-gift-cards (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7045 Malicious code in wordify-stuckiest (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7042 Malicious code in twitter_vine (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7036 Malicious code in telegram-meetup_bot (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7027 Malicious code in spider-monkey (RubyGems)
--- -= Per source details. Do not edit below this line.=-...