31 matches found
Malicious code in virgil-cli (npm)
In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...
Malicious Package
Overview virgil-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-17630 Malicious code in virgil-cli (npm)
In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...
Malicious code in virgil-cli (npm)
In local mode virgil-cli prints that it runs on the user's machine and is free and private. After each turn, reportLearning in dist/api.js posts the whole conversation history, including shell and file tool output, to https://api.nm-streetwear.space/vx/learn with a hardcoded token and a device id...
EUVD-2002-1917
Malware in sbrugna...
CVE-2002-1938
Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the 1 tar TARGET or 2 zielport ZIELPORT parameters...
com.hmsonline:hms-cassandra-indexing (>=0.15.0, <=0.17.0), com.hmsonline:hms-cassandra-mapreduce (0.15.2) +3 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (1.0.7)
org.apache.cassandra:cassandra-all MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.hmsonline:hms-cassandra-indexing =0.15.0, =0.15.0, =0.13.1, =0.15.9 -...
Malware in spring-boot-admin-virgil-custom-ui
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in spring-boot-admin-virgil-custom-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bf8c73b2a5a04555aa1692341d9861a37ad32f428b123c88751322e74c66d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1337 Malicious code in virgil-spring-boot-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...
Malicious code in virgil-spring-boot-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...
Ethereum Developer Jailed 63 Months for Helping North Korea Evade Sanctions
A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country. "There is no question North Korea poses a national...
com.hmsonline:hms-cassandra-indexing (>=0.15.0, <=0.17.0), com.hmsonline:hms-cassandra-mapreduce (0.15.2) +3 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.0.7)
org.apache.cassandra:cassandra-all MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.hmsonline:hms-cassandra-indexing =0.15.0, =0.15.0, =0.13.1, =0.15.9 -...
UBUNTU-CVE-2022-0135
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPUEXECBUFFER ioctl, leading to a denial of service or possible code execution...
virgil.at XSS vulnerability
Open Bug Bounty ID: OBB-607434 Description| Value ---|--- Affected Website:| virgil.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-5937
The utilformatispureuint function in vrendrenderer.c in Virgil 3d project aka virglrenderer 0.6.0 and earlier allows local guest OS users to cause a denial of service NULL pointer dereference via a crafted VIRGLCCMDCLEAR command...
CVE-2017-5937
The utilformatispureuint function in vrendrenderer.c in Virgil 3d project aka virglrenderer 0.6.0 and earlier allows local guest OS users to cause a denial of service NULL pointer dereference via a crafted VIRGLCCMDCLEAR command...
Null pointer dereference
The utilformatispureuint function in vrendrenderer.c in Virgil 3d project aka virglrenderer 0.6.0 and earlier allows local guest OS users to cause a denial of service NULL pointer dereference via a crafted VIRGLCCMDCLEAR command...
DEBIAN-CVE-2017-5937
The utilformatispureuint function in vrendrenderer.c in Virgil 3d project aka virglrenderer 0.6.0 and earlier allows local guest OS users to cause a denial of service NULL pointer dereference via a crafted VIRGLCCMDCLEAR command...
CVE-2017-5937
The utilformatispureuint function in vrendrenderer.c in Virgil 3d project aka virglrenderer 0.6.0 and earlier allows local guest OS users to cause a denial of service NULL pointer dereference via a crafted VIRGLCCMDCLEAR command...