BELL-CVE-2024-29509

Bulletin has no description...

MAL-2024-7266 Malicious code in @zitterorg/maiores-commodi-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d78203f67fe4b8efd76000bab0b09a39c5a8433007c221e08b1ed83ec92ef20c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7323 Malicious code in @zitterorg/perferendis-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a9742ae45fbc542af42a89801a5dcde1a1afb47de034876ecbaff6a8a3570f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7352 Malicious code in @zitterorg/quidem-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd8d6a9544edd984219f44c5005f15ecc77b0b7f1bb4f6f60741fe2f67cb4bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7147 Malicious code in @zitterorg/cum-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383bfe6b92e014b975003a7f1578d4a9668f7546b8dfbd387e0c11ded1f9872b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7412 Malicious code in @zitterorg/voluptates-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33766107e2553aa978698984550099370e587031248fb725ae92a170526792e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

BIT-APACHE-2024-36387 Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...

CGA-6R44-6Q9J-6R4R

Bulletin has no description...

CVE-2024-38857 Reflected links in visuals facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 EOL allows attackers to craft malicious links that can facilitate phishing attacks...

BELL-CVE-2024-5261

Bulletin has no description...

BELL-CVE-2024-39573

Bulletin has no description...

BELL-CVE-2024-6387

Bulletin has no description...

BELL-CVE-2024-38475

Bulletin has no description...

GHSA-3669-72X9-R9P3 Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

GHSA-VG6V-JCG3-5MP7 @aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

@aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

BIT-CILIUM-PROXY-2024-28249

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.13.13, 1.14.8, and 1.15.2, in Cilium clusters with IPsec enabled and traffic matching Layer 7 policies, IPsec-eligible traffic between a node's Envoy proxy and pods on other nodes is sen...

PT-2024-40913 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.4 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...