Malware in analysis-shared-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-servlet (1.1.0.beta5) +2 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.1.0.beta5)

io.undertow:undertow-core MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-servlet 1.1.0.beta5 -...

Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2024-530)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-530 advisory. A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges. CVE-2022-27239 A flaw was found...

dcc-utils (>=0.1.0, <=0.2.1), synapse (>=2.64.0, <=2.77.0) +1 more potentially affected by CVE-2024-26134 via cbor2 (5.4.1)

cbor2 PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on cbor2 and may be impacted: - dcc-utils =0.1.0, =2.64.0, =1.0.2, =1.2.0 Source cves: CVE-2024-26134 Source advisory: OSV:PYSEC-2024-155...

Important: cifs-utils

Issue Overview: A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges. CVE-2022-27239 A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be...

Malicious code in analysis-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b5ec306ddd836199e002421ad6971e233057a594e310d51a70904ca62a8ce9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1021 Malicious code in analysis-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b5ec306ddd836199e002421ad6971e233057a594e310d51a70904ca62a8ce9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.hazelcast:hazelcast-build-utils (4.0.4), com.hazelcast:hazelcast-spring (4.0.4) potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.0.4)

com.hazelcast:hazelcast MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.4 - com.hazelcast:hazelcast-spring 4.0.4 Source cves: CVE-2023-45860 Sour...

com.corundumstudio.socketio:netty-socketio (>=1.7.10, <=1.7.18), com.hazelcast:hazelcast-build-utils (3.4.3) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.4.3)

com.hazelcast:hazelcast MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.10, =1.7.18 - com.hazelcast:hazelcast-build-utils 3.4.3 -...

com.hazelcast:hazelcast-build-utils (3.8.8), com.hazelcast:hazelcast-client (3.8.8) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.8.8)

com.hazelcast:hazelcast MAVEN version 3.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.8 - com.hazelcast:hazelcast-client 3.8.8 - com.hazelcast:hazelcast-spring...

com.hazelcast:hazelcast-build-utils (3.8.7), com.hazelcast:hazelcast-client (3.8.7) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.8.7)

com.hazelcast:hazelcast MAVEN version 3.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.7 - com.hazelcast:hazelcast-client 3.8.7 - com.hazelcast:hazelcast-spring...

com.hazelcast:hazelcast-build-utils (3.9-ea), com.hazelcast:hazelcast-client (3.9-ea) +4 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.9-ea)

com.hazelcast:hazelcast MAVEN version 3.9-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.9-ea - com.hazelcast:hazelcast-client 3.9-ea -...

com.hazelcast:hazelcast-build-utils (3.10-beta-1), com.hazelcast:hazelcast-client (3.10-beta-1) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.10-beta-1)

com.hazelcast:hazelcast MAVEN version 3.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10-beta-1 - com.hazelcast:hazelcast-client 3.10-beta-1 -...

com.github.sinwe.gradle.caching.hazelcast:com.github.sinwe.gradle.caching.hazelcast.gradle.plugin (>=0.15, <=0.16), com.github.sinwe.gradle.caching.hazelcast:gradle-hazelcast-plugin (>=0.14, <=0.16) +29 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.10.2)

com.hazelcast:hazelcast MAVEN version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.github.sinwe.gradle.caching.hazelcast:com.github.sinwe.gradle.caching.hazelcast.gradle.plugin =0.15, =0.14,...

com.hazelcast:hazelcast-build-utils (3.10.3), com.hazelcast:hazelcast-client (3.10.3) +1 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.10.3)

com.hazelcast:hazelcast MAVEN version 3.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.3 - com.hazelcast:hazelcast-client 3.10.3 -...

ch.mobi.mobitor:mobitor-base (>=3.1.305, <=3.1.313), cloud.piranha.extension:piranha-extension-hazelcast (21.10.0) +47 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.2)

com.hazelcast:hazelcast MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.305, =1.37.0, =3.1.5, =0.5.0, =0.6.0, =0.9.0 and more Source cves: CVE-2023-458...

com.att.ocnp.mgmt:grm-edge-service (1.1.18-oss), com.github.erwan-boulard:quartz-hazelcast-jobstore (>=1.1.0, <=1.2.0) +16 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.8.1)

com.hazelcast:hazelcast MAVEN version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.att.ocnp.mgmt:grm-edge-service 1.1.18-oss - com.github.erwan-boulard:quartz-hazelcast-jobstore =1.1.0, =1.0.1...

com.hazelcast:hazelcast-build-utils (4.0-beta-1), com.hazelcast:hazelcast-spring (4.0-beta-1) potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.0-beta-1)

com.hazelcast:hazelcast MAVEN version 4.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0-beta-1 - com.hazelcast:hazelcast-spring 4.0-beta-1 Source cves:...

com.hazelcast:hazelcast-build-utils (4.0-beta-2), com.hazelcast:hazelcast-spring (4.0-beta-2) potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.0-beta-2)

com.hazelcast:hazelcast MAVEN version 4.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0-beta-2 - com.hazelcast:hazelcast-spring 4.0-beta-2 Source cves:...

com.hazelcast:hazelcast-build-utils (4.0.5), com.hazelcast:hazelcast-spring (4.0.5) potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.0.5)

com.hazelcast:hazelcast MAVEN version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.5 - com.hazelcast:hazelcast-spring 4.0.5 Source cves: CVE-2023-45860 Sour...