MAL-2024-10788 Malicious code in seatalk-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b49c417192086e73f64c53ea45009ebeb43e687397b29cc71fd36877345680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10787 Malicious code in seatalk-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ba364a75979c4daf8df3fca9ae125f39309f1e2aaaf2ee625eef7a3e9a1d30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10786 Malicious code in scm-retail-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5c9460f2f7b76b7df92b6f3c8f8237b18cac972b6424471eae0ccd9c78963d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10785 Malicious code in scfe-joint-test-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3833cf8ad16d9a1273233a6ac79ee110667d3ecd4578d106dff23793d703958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10784 Malicious code in sc-case-dispute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10783 Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

MAL-2024-10782 Malicious code in rn-native-portals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc76bce72b94e6ae0b2f629d3fc88141eeebe2e6d7f59c886a7ca7b8ec6d078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10781 Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10780 Malicious code in rich-text-slate-rc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1974a05b4def032650d8412ad77b9ee7b6e530942c4a3ccb90e9c07d5b58830a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10778 Malicious code in redux-store-immutable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b3c7c3c688154e0e3a57a2a85b1e6f27a506c0a4020c324d3d5120a517cad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10777 Malicious code in realtime-translation-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34e252889fa5780663d4a11bb4e396af8861e1c5877da57c6e558e553521302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10776 Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zero-Day Exploitation Targeting Palo Alto Networks Firewall Management Interfaces

On Friday, November 8, 2024, cybersecurity firm Palo Alto Networks PAN published a bulletin PAN-SA-2024-0015 advising firewall customers to take steps to secure their firewall management interfaces amid unverified rumors of a possible new vulnerability. Rapid7 threat intelligence teams have also...

Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10725 Malicious code in libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10722 Malicious code in evocateur_libpnpmpublish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b93729eca5771ff7d79aef7f3b49bf2b018dded8dd351af050ed61daa04903a8 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in evocateur_libpnpmpublisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e097e9da44381fae024bbe6eba31fcf32d11ba6c7e3c489d60ef22c36f13db75 The OpenSSF Package Analysis project identified 'evocateurlibpnpmpublisher' @ 99.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10716 Malicious code in newbharatv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bccffdbbaea730330c6b6156aac69a4852d53debfa863456e47b3d3cb0c53561 The OpenSSF Package Analysis project identified 'newbharatv2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10793

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...