threat-intel-cve-2024-3094

Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...

CVE-2026-14802

CVE-2026-14802 Nombre del software vulnerable y versiones afectadas create-react-app versiones anteriores a la 5.0.2 Descripción En macOS, la función startBrowserProcess dentro del archivo openBrowser.js del componente react-dev-utils permite la inyección de comandos del sistema operativo. Este...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

codehaus-plexus__plexus-utils_CVE-2017-1000487_3-0-15

Este repositorio no tiene un README...

Malicious Package

Overview @bluewin/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: datadog-agent, confluent-docker-utils, py3-pipenv, py3-pip, pypy-3.10, open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, superset, jwt-tool, kserve...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: datadog-agent, confluent-docker-utils, py3-pipenv, py3-pip, pypy-3.10, open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, superset, jwt-tool, kserve...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: datadog-agent, confluent-docker-utils, py3-pipenv, py3-pip, pypy-3.10, open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, superset, jwt-tool, kserve...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: datadog-agent, confluent-docker-utils, py3-pipenv, py3-pip, pypy-3.10, open-webui, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, superset, jwt-tool, kserve...

twint-utils

twint-utils These are utilizations of Twint. Please check out our collaboration guidelines to contribute to these. Mutuals Detector Mufos.py uses Twint to detect a given seed accounts mutual followers. It can be incorporated into other more elaborate pipelines for social networks or millieu...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...

CVE-2024-3094-patcher

Ansible Playbook for Patching xz-Utils Vulnerability CVE-2024-3094 This document details an Ansible playbook designed to address the critical vulnerability CVE-2024-3094 identified in xz-Utils versions 5.6.0 and 5.6.1. This vulnerability, classified as a backdoor, grants attackers unauthorized...

CVE-2024-3094-Checker

CVE-2024-3094-Checker The repository consists of a checker file that confirms if your xz version and xz-utils package is vulnerable to CVE-2024-3094. Disclaimer: 1. This script is provided without any warranty, express or implied. 2. By choosing to execute this script, you accept full...

CVE-2024-3094

CVE-2024-3094 — Puerta trasera de XZ Utils Solo para fines educativos e investigaciones de seguridad autorizadas. Descripción de la Vulnerabilidad CVE-2024-3094 es una puerta trasera introducida en las versiones 5.6.0 y 5.6.1 de XZ Utils liblzma, descubierta el 29 de marzo de 2024 por el...

CVE-2024-56433

CVE-2024-56433 shadow-utils - Asignación insegura de ID subordinado por defecto para usuarios locales Resumen La asignación de ID subordinado por defecto crea un riesgo de colisión con los ID de usuario existentes, lo que potencialmente permite cambiar arbitrariamente el UID/GID y obtener acceso ...

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)

SummaryThe path traversal fix introduced in v0.17.0 GHSA-xjgw-4wvw-rgm4 is incomplete. validatesafepath is called without an explicit basedir, defaulting to os.getcwd. In standard container deployments the process CWD is the application directory e.g. /app, so paths within that directory, includi...

Report-XZ-Utils-CVE-2024-3094

Informe-XZ-Utils-CVE-2024-3094 Hola, este es un informe sobre el CVE-2024-3094, conocido como "XZ-Utils Backdoor". Escribí sobre cómo comienza el ataque y cómo funciona; para ello busqué sitios en línea y explicaciones en video en YouTube, dentro puedes encontrar las referencias. Estoy disponible...

xz

xz — distribución binaria portátil xz-utils vendored @ 5.8.3 post-CVE-2024-3094 — distribución binaria portátil para el ecosistema de paquetes x-cmd. Instalación macOS / Linux anywhere with x: x eget x-cmd-build/xz --to /usr/local/bin/xz Manual: 1. Go to https://github.com/x-cmd-build/xz/releases...

CVE-2024-3094

Utilidad de Verificación y Actualización de Vulnerabilidades de xz-utils Este script está diseñado para verificar vulnerabilidades en la versión instalada de xz-utils en su sistema. Si se detecta una versión vulnerable, el script ofrece descargar e instalar automáticamente una versión estable par...

CVE-2024-3094

CVE-2024-3094 Comprobador y Reparador de Vulnerabilidad de XZ-Utils Este script de Bash verifica las versiones vulnerables de xz-utils instaladas en su sistema y ofrece reemplazarlas con una versión estable y sin comprometer. Requisitos wget tar make sudo Uso 1. Asegúrese de tener las dependencia...