15726 matches found
SUSE-SU-2024:4352-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names bsc1233285 - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict bsc1233292 - CVE-2024-52532: Fixed...
CLSA-2024-1734368297 gnutls: Fix of 3 CVEs
Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use gnutlsswitchlibstate for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side...
The vulnerability of the IPerf3 network bandwidth measurement tool lies in the improper handling of test parameters sent to the server in JSON format. This allows a hacker to cause a service failure.
The vulnerability of the IPerf3 network bandwidth measurement tool is related to the improper processing of testing parameters sent to the server in JSON format. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Fedora 41 : subversion (2024-93e88b1c0d)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-93e88b1c0d advisory. This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more...
Malicious code in rwoka (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 601385385b682f6bdaa31c763e64c5fafb16f22df60acd266c9c7f23f73208ee The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
MAL-2024-12342 Malicious code in rwoka (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 601385385b682f6bdaa31c763e64c5fafb16f22df60acd266c9c7f23f73208ee The package contains highly obfuscated content, that install another, downloaded from a remote location obfuscated script in the installation path of the...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50201)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50201 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder-possibleclones...
MAL-2024-11799 Malicious code in test-rce3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 268f9a9b82d8e6d94dede1f419570ec5e28e30480f9ee76c010cacc4e248fd81 The OpenSSF Package Analysis project identified 'test-rce3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in test-rce3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 268f9a9b82d8e6d94dede1f419570ec5e28e30480f9ee76c010cacc4e248fd81 The OpenSSF Package Analysis project identified 'test-rce3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
media: v4l2-tpg: prevent the risk of a division by zero
...
[SECURITY] Fedora 41 Update: python3.9-3.9.21-1.fc41
Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...
Test page title
Test page heading...
Malicious code in test-wasim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca87e0cafeb997e2bef07223871aafe4ac98437de23d3ff89ed5bb5ae2d1612 The OpenSSF Package Analysis project identified 'test-wasim' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in jitsi-meet-load-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d8d6095bca0d534688b13d2823e401a9d42de4a2fc1fdc8c9bd1be3b147b746 The OpenSSF Package Analysis project identified 'jitsi-meet-load-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
CVE-2024-55653
PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...
CVE-2024-55653 pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)
PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...
CVE-2024-55653
CVE-2024-55653 affects the PwnDoc open-source tool, with versions up to and including 0.5.3. The root issue is an authentication-bypassable path that can raise an UnhandledPromiseRejection on audits, causing the backend to crash. This makes the entire application unresponsive and unusable for all...
PwnDoc 安全漏洞
PwnDoc is a penetration test report generator from PwnDoc open source. A security vulnerability exists in PwnDoc. An attacker exploiting the vulnerability could read arbitrary files on the system...
Malicious code in @wf-ceo/react-test-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...