MAL-2024-12158 Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the dyndbg component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dyndbg component in the Linux operating system’s kernel is related to incorrect error handling in the ddebugtokenize function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-8503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the dyndbg component of the Linux kernel, specifically concerning the handling of errors in the ddebug tokenize function. This could potentially allow an attacker...

SUSE CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

OESA-2022-1877 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained,high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

UBUNTU-CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

PYSEC-2021-859

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

PT-2021-23980

Name of the Vulnerable Software and Affected Versions: NLTK versions prior to 3.6.5 Description: The issue is related to regular expression denial of service ReDoS attacks, which can cause significant execution time when a specifically crafted long input is provided to vulnerable functions. The...

Vested NFT not always minted

Handle cmichel Vulnerability details The FSDVesting.claimVestedTokens function tokenizes the conviction only if the current claimed amount tokenClaim equals the total vested amount amount. // tokenClaim is vestedAmount - totalClaimed uint256 tokenClaim = calculateVestingClaim; if amount ==...

Insufficient Session Expiration in @cyyynthia/tokenize

Impact A bug introduced in version 1.1.0 made Tokenize generate faulty tokens with NaN as a generation date. As a result, tokens would not properly expire and remain valid regardless of the lastTokenReset field. Patches Version 1.1.3 contains a patch that'll invalidate these faulty tokens and mak...

PT-2021-24436

Name of the Vulnerable Software and Affected Versions: Tokenize versions 1.1.0 through 1.1.2 Description: A bug in Tokenize causes the generation of faulty tokens with NaN as a generation date, resulting in tokens not expiring and remaining valid regardless of the lastTokenReset field...

caddy:fuzz-tokenize: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5075254369189888 Project: caddy Fuzzing Engine: libFuzzer Fuzz Target: fuzz-tokenize Job Type: libfuzzerasancaddy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

PT-2019-16284

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to improper input validation in the tokenize function of sqlite3 android.cpp, which could allow an attacker to execute an INSERT statement. This could lead to local escalation of...

Netwide Assembler Heap Buffer Over-Read Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A heap buffer over-read vulnerability exists in the tokenize function in asm/preproc.c in Netwide Assembler NASM 2.13.02rc2, for which there is currently no detailed vulnerability description...

CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

Heap overflow

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

DEBIAN-CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8881

Netwide Assembler NASM 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string...

CVE-2018-8881

CVE-2018-8881 affects Netwide Assembler (NASM) with a heap-based buffer over-read in the tokenize function (asm/preproc.c) caused by an unterminated string. Reported as part of NASM 2.13.02rc2 and related builds; OpenVAS/Nessus entries reiterate this CVE among a broad NASM set. No public remediat...