MAL-2024-7147 Malicious code in @zitterorg/cum-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383bfe6b92e014b975003a7f1578d4a9668f7546b8dfbd387e0c11ded1f9872b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7412 Malicious code in @zitterorg/voluptates-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33766107e2553aa978698984550099370e587031248fb725ae92a170526792e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39931

Gogs through 0.13.0 allows deletion of internal files...

CVE-2024-39932

Gogs through 0.13.0 allows argument injection during the previewing of changes...

BIT-APACHE-2024-36387 Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...

CGA-6R44-6Q9J-6R4R

Bulletin has no description...

CVE-2024-38857 Reflected links in visuals facilitate phishing attacks

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 EOL allows attackers to craft malicious links that can facilitate phishing attacks...

BELL-CVE-2024-5261

Bulletin has no description...

BELL-CVE-2024-39573

Bulletin has no description...

BELL-CVE-2024-6387

Bulletin has no description...

BELL-CVE-2024-38475

Bulletin has no description...

GHSA-3669-72X9-R9P3 Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

@aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

GHSA-VG6V-JCG3-5MP7 @aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

BIT-CILIUM-PROXY-2024-28249

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.13.13, 1.14.8, and 1.15.2, in Cilium clusters with IPsec enabled and traffic matching Layer 7 policies, IPsec-eligible traffic between a node's Envoy proxy and pods on other nodes is sen...

PT-2024-40913 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.4 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

GO-2024-2531 1Panel set-cookie is missing the Secure keyword in github.com/1Panel-dev/1Panel

1Panel set-cookie is missing the Secure keyword in github.com/1Panel-dev/1Panel...

BIT-GITLAB-2024-5655 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...

BELL-CVE-2024-37371

Bulletin has no description...

PT-2024-28752 · Perforce · Helix Alm

Name of the Vulnerable Software and Affected Versions: Helix ALM versions prior to 2024.2.0 Description: A local command injection issue was identified. The issue was reported by Bryan Riggins. Recommendations: For Helix ALM versions prior to 2024.2.0, update to version 2024.2.0 or later to resol...