16956 matches found
MAL-2024-7875 Malicious code in boostrapsio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d56d7ae2cc50c737f4b7272c51fef0ec9899e899d19628763c3aa6aad5dfef1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ASB-A-336648613
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
GHSA-P9W4-585H-G3C7 biscuit-auth vulnerable to public key confusion in third party block
Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a ThirdPartyBlock request can be sent, providing only the necessary info to generate a third-party block and to sign it: - the public key of the previous block used in the signature - t...
BELL-CVE-2024-42228
Bulletin has no description...
BELL-CVE-2024-42225
Bulletin has no description...
BELL-CVE-2024-42161
Bulletin has no description...
BELL-CVE-2024-42223
Bulletin has no description...
BELL-CVE-2024-42162
Bulletin has no description...
BELL-CVE-2024-42158
Bulletin has no description...
BELL-CVE-2024-42155
Bulletin has no description...
BELL-CVE-2024-42154
Bulletin has no description...
BELL-CVE-2024-42147
Bulletin has no description...
BELL-CVE-2024-42141
Bulletin has no description...
BELL-CVE-2024-42143
Bulletin has no description...
BELL-CVE-2024-42139
Bulletin has no description...
BELL-CVE-2024-42135
Bulletin has no description...
BELL-CVE-2024-42137
Bulletin has no description...
BELL-CVE-2024-42138
Bulletin has no description...