11989 matches found
MAL-2024-7071 Malicious code in @corp-njord/core (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1856 Malicious code in @caesars-digital/caesars-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1980 Malicious code in @b2bgeo/ci-github (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2283 Malicious code in efx-angular-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2394 Malicious code in front-locales (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
New Cyberthreat 'Boolka' Deploying BMANAGER Trojan via SQLi Attacks
A previously undocumented threat actor dubbed Boolka has been observed compromising websites with malicious scripts to deliver a modular trojan codenamed BMANAGER. "The threat actor behind this campaign has been carrying out opportunistic SQL injection attacks against websites in various countrie...
Multiple WordPress Plugins Compromised: Hackers Create Rogue Admin Accounts
Multiple WordPress plugins have been backdoored to inject malicious code that makes it possible to create rogue administrator accounts with the aim of performing arbitrary actions. "The injected malware attempts to create a new administrative user account and then sends those details back to the...
CVE-2021-47595
CVE-2021-47595 affects the Linux kernel net/sched sch_ets. The vulnerability arises when the ETS qdisc changes (ets_qdisc_change) cause list_del corruption, leading to kernel BUG checks (invalid opcode in list_debug.c) and a system crash. The provided traces show the crash occurs in ets_qdisc_cha...
CVE-2024-38604
In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...
GHSA-GMRM-8FX4-66X7 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-operator...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:3254)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3254 advisory. buildah: full container escape at build time CVE-2024-1753 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters...
CGA-P3W2-7JG8-HQRQ
Bulletin has no description...
Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)
Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...
CVE-2024-5742
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...
CGA-2FQ6-P83Q-PM8X
Bulletin has no description...
CGA-979W-8Q4F-99C4
Bulletin has no description...
CGA-XG52-C7JP-QWQR
Bulletin has no description...
CGA-X65Q-F85X-F2CF
Bulletin has no description...