Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-438 Malicious code in dropbox-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b91e399de2020315c4cb5a23b17d10a7d6a0e882e45bb2bb92a92ce4d9b59b3 The OpenSSF Package Analysis project identified 'dropbox-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-426 Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-409 Malicious code in bookingcom-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f56403aaa0ed1c7153c059cbc6a71669450bef206e1364b7ea6b2b93497e376b The OpenSSF Package Analysis project identified 'bookingcom-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5

1:17.0.14.0.7-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.14.0.7-3 - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and for build' 1:17.0.14.0.7-2 - Do not pass nil to jvmdir macro in cjc logic - Related: RHEL-73867 1:17.0.14.0.7-2 - Adapt to newest cjc to fix...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2025-0422)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0422 advisory. 1:17.0.14.0.7-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.14.0.7-3 - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and fo...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from a privilege issue vulnerability that originates from decrypting connection secrets without proper privileges by testing the connection endpoint. No...

ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-quarkus-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +1121 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=6.0.0.Beta1 <=6.2.2.Final)

org.jboss.resteasy:resteasy-core MAVEN version =6.0.0.Beta1, =0.1.0, =0.1.0, =0.7.20, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.0, =8.0.0, =8.0.0, =8.0.0, =1.6.17, =1.6.17, =1.6.18 and more Source cves: CVE-2023-0482 Source advisory...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38 <=0.8.41), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38 <=0.8.41) +1863 more potentially affected by CVE-2023-0482 via org.jboss.resteasy:resteasy-core (>=4.0.0.Beta6 <=4.7.7.Final)

org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.Beta6, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =2.0.0, =0.1.5, =0.1.5, =1.0.0-alpha1, =0.0.1, =1.8.0, =0.5.8, =0.5.9 and more Source cves: CVE-2023-0482 Source advisory: OSV:GHSA-2C6G-PFX3-W7H8htt...

SUSE CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

OPENSUSE-SU-2025:0003-1 Security update for etcd

This update for etcd fixes the following issues: Update to version 3.5.12: Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 test: fix TestHashKVWhenCompacting: ensure all goroutine finished print error log when creating peer listener failed mvcc: Printing etcd backend database related...

CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

UBUNTU-CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

CVE-2024-50713

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...

PT-2024-34396 · Unknown · Smart Agent

Name of the Vulnerable Software and Affected Versions: SmartAgent version 1.1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tests/interface.php" API endpoint. Recommendations: For SmartAgent version 1.1.0,...

Smarts Smart Agent 安全漏洞

Smarts Smart Agent is a powerful, flexible and scalable tool from Smarts for monitoring wireless network performance and services from the end user's perspective. An SQL injection vulnerability exists in Smarts Smart Agent v1.1.0, which stems from a lack of validation of externally entered SQL...

CLSA-2024-1734708244 Fix of 15 CVEs

OpenJDK 11.0.25 release, build 9. - CVE-2024-21131, CVE-2024-21138, CVE-2024-21140, CVE-2024-21144, CVE-2024-21145, CVE-2024-21147, CVE-2024-21208, CVE-2024-21210, CVE-2024-21217, CVE-2024-21235. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-October/038512.html -...