4518 matches found
CVE-2024-39014
The CVE CVE-2024-39014 affects cahil/utils version 2.3.2. Root cause: prototype pollution via the set function, enabling an attacker to inject arbitrary properties and potentially execute arbitrary code or cause a Denial of Service. Documentation notes exploitation and impact but does not provide...
PT-2024-28326 · Che3Vinci · C3/Utils-1
Name of the Vulnerable Software and Affected Versions: che3vinci c3/utils-1 version 1.0.131 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the assign function...
cahil utils security vulnerability
cahil utils is a variety of utilities from the individual developer Cahil Foley that provide assistance when developing JS or TS projects. A security vulnerability exists in cahil utils version v2.3.2, which stems from a prototype contamination via function set inclusion, allowing an attacker to...
c3 utils security vulnerability
c3 utils is an open source utility library by che3vinci. A security vulnerability exists in c3 utils version 1.0.131, which originates from the inclusion of prototype contamination via the function assign, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injectin...
Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils
...
Malicious code in iobeya-time-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5b2fd0fb985e16671bbfe20f9b7b2ef8e7a62cc0050b51cea290d85574f75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @freetime/core-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7050 Malicious code in @freetime/core-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Updated erofs-utils packages fix security vulnerabilities
Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...
MGASA-2024-0241 Updated erofs-utils packages fix security vulnerabilities
Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...
Mageia: Security Advisory (MGASA-2024-0241)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ChuanhuChatGPT Security Vulnerability
ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A security vulnerability exists in ChuanhuChatGPT, which stems from a lack of cleanup or validation of the keyword parameter, and a denial of service vulnerability in the...
Malicious code in applicious-utils (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6649 Malicious code in applicious-utils (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5466 Malicious code in pik-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pik-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4841 Malicious code in bupi-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4840 Malicious code in bup-utils (PyPI)
--- -= Per source details. Do not edit below this line.=-...