MAL-2024-10773 Malicious code in rct-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d42a5f1b620b206b85fa553b60cc9f0bba3f0b16ab0d8ba57a635125fb3f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10714 Malicious code in erc4337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 331ff3b73d0d5c94f6156a7afd0dc8aaf6b6b0c316abbe82155de79a1e26d130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10713 Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in atlas-query-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-10769 Malicious code in preact-cli-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b97d147bbe2f906512da2cfa2de62ecc0c18b2afd14ceb1dfd755122300ea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin WP Activity Log 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-10583 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a read/write serialization problem in the read function of ProcessStats.java, which can lead to a permissions bypass. This could result in local escalation of...

CVE-2024-48967

The CVE-2024-48967 entry concerns Baxter Life2000 ventilator and associated Service PC, where inadequate audit logging prevents detection of malicious activity. The description states that an attacker with access could alter ventilator settings without detection, leading to unauthorized informati...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

WordPress WP Activity Log plugin <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin WP Activity Log versions = 5.2.1...

MAL-2024-10767 Malicious code in people-rn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681ed628388433ac94a7fae9dc863ce558f90b455be767d11efd4b5f0ad7bd97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opa-fe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10760 Malicious code in mkt-worker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8971f053ecded5e4c81fa201da46f7838e79cf6635808be72fa828ae029a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10759 Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10757 Malicious code in markservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967b4b4c0264a9fff8d309834b2a12350b0db8f50f86f487903ce1556d628d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10756 Malicious code in markomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77eccdef0d97ddaef12d7b6d994f078943e26b68cb1dbf79615d0a18035b96ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10755 Malicious code in marketing-jest-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6ca86b3958ca21a43d81429cfad45bf1ded2515bc8fafc3307885ed2f6b869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10752 Malicious code in magic-umi-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4f026691827b0fc765f9ef1d86d699d1044f815fbe81787619c55de35ba765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...