@nestjs/core vulnerable to Information Exposure via StreamableFile pipe

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open...

CVE-2023-0734 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

DSA-5369-1 syslog-ng - security update

Bulletin has no description...

CVE-2023-1170 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376...

CVE-2023-27560

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields...

CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...

ASB-A-193434313

Bulletin has no description...

PUB-A-253770924

In smsGetTpPiIe of smsPduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-264261868

In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code...

ASB-A-264831217

There is a use-after-free issue in vha0, this could lead to local denial of service...

PUB-A-244569778

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-22996

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcomaoss.c does not release an offinddevicebynode reference after use, e.g., with putdevice...

MAL-2023-3254 Malicious code in esqproofrandommine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 024f1e40989828c5b2cf0a5b3ee159d5a562b9a46074f5e8410d570bbfea6094 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7103 Malicious code in tphackedrandhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a5d96cb29e21a4fff6805fb203b475e7ef5de8cf008c3edbe295953e177ba643 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3230 Malicious code in esqpostinfostr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 61d866fa994654813c8b81aad534f70afc2b8ed265d3dd747c89daf7e7d5d16d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpaypalpywgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4064d47bc870e0480f7a3fa391303decf025018163750f0e10cacece802ddbe7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpinggetcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9cc87e4cddc3d0de7686f192996003553aa6ab4079445e5d9055d43fd6a036e5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5582 Malicious code in py-randpushint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 146005bc98bb087e4a34d633963bd44e028cadb52efce0a3dc258525a9db90b8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5916 Malicious code in replacead (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1fb6fb22080ac44927788f9baf73c4d5bee78202eaa9df5733c53dfa98e75104 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4947 Malicious code in proofproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01fc026e13ec6e4f17dd3b6c1fc4eacbfadd4dffd1bd705f9d4c27afcea3add3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...