github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp

A flaw was found in jaraco/zipp. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is...

[SECURITY] Fedora 40 Update: libarchive-3.7.2-7.fc40

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

7-Zip < 24.01 Heap-based Buffer Overflow

The version of 7-Zip installed on the remote Windows host is below 24.01. It is, therefore, affected by multiple vulnerabilities: - The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 for 7zz contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offse...

Malicious code in zip-mp3-a-lbum-do-wnload-new-coexist-l4rjg-vsisft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbda29687ce05eceb8a7140f99fe1073db44c499a2817a3334aba733cda1eb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-load-available-zip-now-365509-chew-the-scenery-ymqd7-xaqqmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39470e2ad654687e0841bb2740b376632c07ad817ddd755c4037149fb3872220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zip-mp3-a-lbum-do-wnload-new-in-the-future-vrf78-daqfza (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91e46e5ef66303112352a974ee7bc6779610608153a5c47dc2c5693586b6c6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9382 Malicious code in mp3-file-zip-d-ownload-33971-the-imagination-stage-ar0bb-cvzjxl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d397cb1db7e38b452c53b76a84ba968b5f74923158192a310862474b0bf7b0df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9360 Malicious code in down-load-available-zip-now-23630-non-stop-je-te-plie-en-deux-6jxm0-xjqkwj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 382006e2345d556d86f24dd65c61ef384292eebd06018746c90fcb445fb9f06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9330 Malicious code in alb-um-availa-ble-zip-mp3-file-46046-radical-connector-m2ydd-nirtvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c7604df6d26c098c3985382dc30aada82e32d972c2f8222802ff998dc52ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9386 Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7e81cbd6ad8ee7eb04588e6fec967a31ee4e9528bf73c5c1c3e5f53565645f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9401 Malicious code in zip-mp3-a-lbum-do-wnload-new-in-the-future-vrf78-daqfza (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91e46e5ef66303112352a974ee7bc6779610608153a5c47dc2c5693586b6c6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9361 Malicious code in down-load-available-zip-now-35816-laughter-lust-jih3q-fajkvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ad3ddf2c98158b6229fefade7b53eaa9a4f56a81e3d7e161b268bf9030502c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9344 Malicious code in availab-le-alb-um-zip-25931-the-life-aquatic-studio-sessions-mocn6-tnmvnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079687bc4eb89b80d1248111bbcffc5f68f4db1447a830acc63113bc230361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9345 Malicious code in availab-le-alb-um-zip-26387-this-is-the-second-album-of-a-band-called-adebisi-shank-pdmrd-ikxtvt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e49a7981d176acea58956a8041e33887f222b2775dc802bf49a49e1a733998 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9363 Malicious code in down-load-available-zip-now-6092-expensive-shit-dzpv2-hzbnea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79fe8ef88f384da23acf0dc32b73a850c34cf66d84671942c3360d0a4de193e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9327 Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9328 Malicious code in alb-um-availa-ble-zip-mp3-file-30506-i-feel-alright-898re-atdkuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 301aedb3c629f2045611e487e9d753ff50c0a6fc1da4ee93c01ab32ee0cff0a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9400 Malicious code in zip-mp3-a-lbum-do-wnload-new-gift-of-screws-q2h3s-xswcix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c826accfd7196480d4adb24ef7362a9ac257c5a2b760e84f936624e6147e724 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9329 Malicious code in alb-um-availa-ble-zip-mp3-file-38068-its-all-about-to-change-rnonb-pzjjbh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4008f42b5bc2b6647cc2d9e297edb68f60da9ce6c5a20e62b44cb70616a8a6d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9331 Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896431589d1851d65f8365d770dff71aa63f823917838fd5734b3ee77fe7f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...