1185 matches found
Moderate: Red Hat Bug Fix Advisory: Updated rhel9/toolbox container image
An updated rhel9/toolbox container image is now available in the Red Hat container registry. The rhel9/toolbox container image can be used with Toolbox to obtain RHEL based containerized command line environments to aid with development and software testing. Toolbox is built on top of Podman and...
atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2024-43805 via jupyterlab (2.1.5)
jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...
Malware in toolbox-v2
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in toolbox-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7867 Malicious code in toolbox-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df94f6499b37161c460ae24047d64d2db531042b7ea4e2f4138128bf723acdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in arnold-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3af217ab42360fa62b1e1e03668e6d7e45ce26df78ea96f2c6726838d74d82d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11525 Malicious code in arnold-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3af217ab42360fa62b1e1e03668e6d7e45ce26df78ea96f2c6726838d74d82d1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-7784 Malicious code in jqtools-toolbox-expose (npm)
The package contains code to exfiltrate user and host information to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf8ecc5384976555e101e147d0456707c86467e52647ed0bdbc91bc47639356a The OpenSSF Package Analysis project identified...
Malicious code in jqtools-toolbox-expose (npm)
The package contains code to exfiltrate user and host information to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf8ecc5384976555e101e147d0456707c86467e52647ed0bdbc91bc47639356a The OpenSSF Package Analysis project identified...
Malware in toolbox-controller
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2024-39700 via jupyterlab (2.1.5)
jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2024-39700 Source advisory: OSV:PYSEC-2024-322...
Malicious code in toolbox-controller (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
microbiome-toolbox (>=0.0.8, <=0.0.11), predictnow-client (>=0.0.1, <=0.0.9) potentially affected by CVE-2024-6345 via setuptools (50.3.0)
setuptools PYPI version 50.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - microbiome-toolbox =0.0.8, =0.0.1, =0.0.9 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...
Important: Red Hat Security Advisory: toolbox security update
An update for toolbox is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 9 : toolbox (RHSA-2024:4443)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4443 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and othe...
MAL-2024-6214 Malicious code in wmi-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wmi-toolbox (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3055 Malicious code in stitch-ui-toolbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8c164c3cf7998ef763616f524ca40c36a007e570d7c43c1ee9bff41689d29cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in stitch-ui-toolbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8c164c3cf7998ef763616f524ca40c36a007e570d7c43c1ee9bff41689d29cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...