MAL-2025-3856 Malicious code in spl-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e0efcb779c43be336174a24f04614ab82be9f92a235feaf6e344d814bb2789 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-20226 Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a saved search with a risky command using the permission...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3, 9.4.0 < 9.4.1 (SVD-2025-0305)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0305 advisory. - In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107,...

Splunk Cloud Platform和Splunk Enterprise 信息泄露漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An information disclosure vulnerability exists...

GHSA-H6XM-C6R4-VMWF Unsound usages of `u8` type casting in spl-token-swap

The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...

rcc-solana (0.1.0) potentially affected by unknown CVE via spl-token-swap (3.0.0)

spl-token-swap CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on spl-token-swap and may be impacted: - rcc-solana 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0426...

CVE-2024-53244

CVE-2024-53244 affects Splunk Enterprise and Splunk Cloud Platform: versions prior to 9.3.2 (Enterprise) and prior to 9.2.2406.107, 9.2.2403.109, 9.1.2312.206 (Cloud) are vulnerable. The issue is a bypass of SPL safeguards for risky commands via the s parameter on the /en-US/app/search/report end...

CVE-2024-53246 Sensitive Information Disclosure through SPL commands

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, suc...

CVE-2024-53246 Sensitive Information Disclosure through SPL commands

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, suc...

MAL-2024-10167 Malicious code in spl-token (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in spl-token (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in spl-types (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62ae4c4e03f2865a43a463427c66b7131a5c981b645d24d246d93435347e5819 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-12336 Malicious code in raydium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 236ebe472d3c676e9d99d6370d989ade43f7acdec0a2076c3dedbc9682b8f3a2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-12337 Malicious code in raydium-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e485f39cf4f7255533241d5feba7f3d2bb7b80f37adde2d0a2046c838bfd4fef --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-12347 Malicious code in sol-instruct (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1476f5fb9d2cca155c1adb783b39f5fce22901480eb717733ed7e687bfd978f2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

Malicious code in sol-instruct (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1476f5fb9d2cca155c1adb783b39f5fce22901480eb717733ed7e687bfd978f2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

MAL-2024-12349 Malicious code in spl-types (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 62ae4c4e03f2865a43a463427c66b7131a5c981b645d24d246d93435347e5819 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

Malicious code in raydium-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e485f39cf4f7255533241d5feba7f3d2bb7b80f37adde2d0a2046c838bfd4fef --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...

CVE-2024-36986

Summary of CVE-2024-36986 (Splunk) : An authenticated Splunk user can bypass SPL safeguards for risky commands in Analytics Workspace by abusing a Search ID query flow. Impact is that a low-privilege, phishing-recruited user can execute commands with higher-privilege permissions, potentially lead...

CVE-2024-29946

In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by tricking them into...