47 matches found
pfsense-api-unix-sock-noauth
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-unix-sock-noauth pfsense-api-unix-sock-noauth Class: Privilege leftover Reach: Local pfSense Plus MIM API b4acd7ca - Netgate github.com/Netgate/pfsense-api is the public OpenAPI plus generated Python for...
Malicious code in @hrmony/hyper-json-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8139053048172994cadd0251ef74e5104c489dcb4f0448153ea9342b3feb707 On module load, index.js performs top-level fetch to a hardcoded attacker-controlled endpoint at...
MAL-2026-17264 Malicious code in @hrmony/kit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4084c44ab6554d66c474338de2cb482a25b31e6822d470e08b2b2ef5b1735a The package executes credential-harvesting code both from its postinstall script scripts/check-setup.mjs and from its main entry index.js, so theft...
Malicious code in @hrmony/app-gateway-templates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d3f05113dd7daa9fac2da8187afecc751fafcf96449e7f4eb4a5d9a4878844 On require/import of @hrmony/app-gateway-templates, index.js the package main executes an exfiltration routine against a hardcoded attacker endpoint ...
Malicious code in @hrmony/benefit-sachbezug (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de40a55476bbcc5eda275f9f385396699f1b066bf1ddedb80fad053c4057c63a The package's main entry index.js executes at require/import time and POSTs harvested data to the hardcoded endpoint...
Malicious code in @hrmony/pladddform-codegen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f0706d7223f8a1ff87ac80c6e1e42af148214545e55acc865cce12fee7eec4 On module load, index.js unconditionally beacons to the hardcoded non-first-party endpoint...
MAL-2026-17275 Malicious code in @hrmony/pladddform-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e61c4d5d499198c568d9f255e23b407eb7e47f7272c76bf5f50a0d0db31605 On top-level module load, index.js queries the AWS instance metadata service at 169.254.169.254 IMDSv2, retrieves the instance identity document,...
SUSE-SU-2026:1063-1 Security update for frr
This update for frr fixes the following issues: Security issues: - CVE-2025-61099: NULL Pointer Dereference in FRRouting bsc1252838. - CVE-2025-61100: NULL Pointer Dereference in FRRouting bsc1252829. - CVE-2025-61101: NULL Pointer Dereference in FRRouting bsc1252833. - CVE-2025-61102: NULL Point...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal in the untar process. An attacker can execute arbitrary code with elevated privileges by crafting a malicious archive containing symbolic links that overwrite critical files such as /var/run/argo/argoexec, which...
EUVD-2012-4409
Malware in sbrugna...
NewStart CGSL MAIN 6.06 : initscripts Vulnerability (NS-SA-2025-0229)
The remote NewStart CGSL host, running version MAIN 6.06, has initscripts packages installed that are affected by a vulnerability: - rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or...
Linux Distros Unpatched Vulnerability : CVE-2017-18226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary...
CVE-2023-42456
Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...
SUSE CVE-2011-1784
The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files...
CVE-2022-22215
A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. It is possible that after the...
PT-2022-7759
Name of the Vulnerable Software and Affected Versions openshift node-utils affected versions not specified Description A issue was reported where watchman in openshift node-utils creates files with world writable permission, specifically /var/run/watchman.pid and /var/log/watchman.output...
CVE-2012-4480
mom creates world-writable pid files in /var/run...
Code injection
mom creates world-writable pid files in /var/run...
CVE-2012-4480
CVE-2012-4480 affects the mom tool, where it creates world-writable PID files in /var/run. This local issue could let an attacker influence PID handling and terminate other processes, as indicated by CNVD/Fedora advisories and the NVD entry. The vulnerability is tied to local access and uncertain...
