Lucene search
K

16 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 10:25 p.m.2 views

Malicious code in sonic-koig-tima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a16c8559a87adb9e8832290de8a284ce1a237c02930748c175c720b9c93dd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/12 10:25 p.m.1 views

MAL-2025-185004 Malicious code in sonic-koig-tima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a16c8559a87adb9e8832290de8a284ce1a237c02930748c175c720b9c93dd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-3009

Malware in sbrugna...

4.7CVSS4.9AI score0.00066EPSS
Exploits2References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-27418

Malicious code in bioql PyPI...

5.5CVSS5.8AI score0.00041EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:47 p.m.5 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS7AI score0.00041EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.3 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS6.2AI score0.00041EPSS
Exploits0References2
NVD
NVD
added 2022/01/10 2:12 p.m.11 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS0.00041EPSS
Exploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.1 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2022/01/10 2:12 p.m.16 views

Input validation

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

2.1CVSS5.5AI score0.00041EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/01/07 10:39 p.m.64 views

CVE-2022-22271

CVE-2022-22271 concerns Samsung TIMA Trustlet where a missing input validation before memory copy allows copying data from arbitrary memory. Connected sources (e.g., PT-2022-15317) specify that TIMA Trustlet versions prior to SMR Jan-2022 Release 1 are affected; remediation is to update to SMR Ja...

5.5CVSS5.5AI score0.00041EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/07 12:0 a.m.3 views

PT-2022-15317 · Unknown · Tima Trustlet

Name of the Vulnerable Software and Affected Versions: TIMA trustlet versions prior to SMR Jan-2022 Release 1 Description: A missing input validation before memory copy in the TIMA trustlet allows attackers to copy data from arbitrary memory. Recommendations: For versions prior to SMR Jan-2022...

5.5CVSS5.5AI score0.00041EPSS
Exploits0References3
Prion
Prion
added 2017/01/27 8:59 p.m.17 views

Code injection

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...

1.9CVSS6.3AI score0.00066EPSS
Exploits2References4Affected Software1
OSV
OSV
added 2017/01/27 8:59 p.m.2 views

CVE-2016-1919

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...

4.7CVSS5.8AI score0.00066EPSS
Exploits2References4
NVD
NVD
added 2017/01/27 8:59 p.m.16 views

CVE-2016-1919

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...

4.7CVSS4.5AI score0.00066EPSS
Exploits2References4
Cvelist
Cvelist
added 2017/01/27 8:0 p.m.17 views

CVE-2016-1919

Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack...

4.5AI score0.00066EPSS
Exploits2References4
myhack58
myhack58
added 2017/01/12 12:0 a.m.18 views

In-depth analysis of TIMA any kernel module authentication bypass vulnerability-vulnerability warning-the black bar safety net

In order to ensure that the Android device in Linux kernel the integrity of the, Samsung introduced a named“lkmauth”function. This function was originally designed to ensure that only the Samsung-approved those that the kernel module can only be loaded into the Linux kernel. TIMA any kernel modul...

Exploits0
Rows per page
Query Builder