Malicious Package

Overview red-contrib-aws-stream-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Redis Labs Redis 安全漏洞

Redis Labs Redis is an open source, web-enabled, memory-based, persistent logging, key-value Key-Value storage database written in ANSI C, with a multi-language API, from Redis Labs. A security vulnerability exists in Redis, which stems from the discovery that Redis v7.0 contains a memory leak vi...

Malicious code in @zipmex/events-stream-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b626ed2ba8317a3c709a45a9d17f5ef193b73c0b157c6dc10c88a6c9a08cc513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-794 Malicious code in @zipmex/events-stream-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b626ed2ba8317a3c709a45a9d17f5ef193b73c0b157c6dc10c88a6c9a08cc513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdc-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50390ed1cd3695772872a4a39fe10ca0945ca2aedf8136df6c4e3789f3960b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6057 Malicious code in sfdc-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50390ed1cd3695772872a4a39fe10ca0945ca2aedf8136df6c4e3789f3960b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2349 Malicious code in datadog-app-stream-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2bb8c835585dd549dff499a67f8ac42c774755fe17d7c7f54561aa816afca2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app-stream-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2bb8c835585dd549dff499a67f8ac42c774755fe17d7c7f54561aa816afca2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2014-125017

A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpzadecodestream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix thi...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in FFmpeg rpzadecodestream, which can be exploited by an attacker to trigger an out-of-bounds read memory access and execute arbitrary code on the syst...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 2 (7.5.3-407)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-140018 Unable to set an IP address to containers based on the vzlinux-stream-9-x8664 and centos-stream-9-x8664 templates. Vulnerability id: PSBM-140305...

CVE-2021-35080

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-30345

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30345

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30346

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

Information disclosure

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

Input validation

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

Input validation

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-35070

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35070

CVE-2021-35070 involves Qualcomm closed‑source components where RPM secure stream can access any secure resource due to misconfigured SMMU, potentially causing information disclosure on Snapdragon Industrial IOT and Snapdragon Mobile. The root cause is improper SMMU configuration that grants acce...