456 matches found
CVE-2019-15608
A flaw was found in Yarn. The package integrity validation in Yarn contains a time-of-check to time-of-use TOCTOU vulnerability where the hash is computed before writing a package to cache and is not computed again when reading from the cache. This flaw may lead to a cache pollution attack. The...
Photon OS 3.0: Yarn PHSA-2020-3.0-0078
An update of the yarn package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0078. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135786;...
Photon OS 1.0: Yarn PHSA-2020-1.0-0288
An update of the yarn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0288. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135493;...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0227
An update of 'libtiff', 'python2', 'bubblewrap', 'postgresql', 'yarn', 'libgcrypt', 'haproxy' packages of Photon OS has been released...
Important Photon OS Security Update - PHSA-2020-0227
Updates of 'haproxy', 'yarn', 'libgcrypt', 'python2', 'libtiff', 'postgresql', 'bubblewrap' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-0078
Updates of 'bubblewrap', 'python3', 'python2', 'haproxy', 'yarn', 'ansible', 'libtiff', 'libvirt' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-3.0-0078
Updates of 'libtiff', 'haproxy', 'yarn', 'libvirt', 'ansible', 'python3', 'bubblewrap', 'python2' packages of Photon OS have been released...
Starkiller - A Frontend For PowerShell Empire
Starkiller is a Frontend for Powershell Empire. It is an Electron application written in VueJS. If you'd like to contribute please follow the Contribution guide. Getting Started To run Starkiller, you can download the installers for Mac, Linux, and Windows on the Releases page. For more info on...
CVE-2020-8131
An arbitrary file write flaw was found in Yarn. This flaw allows an attacker to write files to a user’s system in unexpected places, potentially leading to remote code execution. The attacker would need to first trick a developer into installing a malicious package...
Yarn Competition Condition Problem Vulnerability
Yarn is an open source package installation, management tools. A Competing Conditions Issue vulnerability exists in package integrity checking in versions prior to yarn 1.19.0. The vulnerability stems from improper handling of concurrent access when concurrent code requires mutually exclusive...
DEBIAN-CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
UBUNTU-CVE-2019-15608
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
Design/Logic Flaw
The package integrity validation in yarn 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack...
CVE-2019-15608
The CVE-2019-15608 issue is a TOCTOU race condition in Yarn where the package hash is computed before writing to the cache and not recomputed on read, enabling potential cache pollution. Connected sources confirm this affects Yarn versions older than 1.19.0 and that a fix exists in 1.19.0. Photon...
Important Photon OS Security Update - PHSA-2020-0068
Updates of 'yarn' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-3.0-0068
Updates of 'yarn' packages of Photon OS have been released...