Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions 6.5.1 through 6.5.10, 7.0.1 through 7.0.16, and 6.0, which stems from a cross-site scripting vulnerability in which JavaScript code in the short description of the SLA field in the Activity dialog box...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

CVE-2024-48937

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed...

Malicious code in @copilot-web-widgets/common-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 npm as malicious. It is considered malicious...

CVE-2024-9469

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

MAL-2024-9113 Malicious code in extrafee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47b8fc5fe34861f3bc946919d0be2e616339384dd0ef276e64c0c9c891cc3002 The OpenSSF Package Analysis project identified 'extrafee' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-6717

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: The issue is related to an SQL injection vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to reveal Expedition...

CVE-2024-9412

creationtimestamp| type| source ---|---|--- 2024-10-08 22:54:59+00:00| seen| https://t.me/cvedetector/7414...

MAL-2024-9105 Malicious code in @fdp-tools/eslint-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...

Malicious code in @fdp-tools/observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3470fe72252929511b982b06c857fe2d4c8030b512a880c9bc15a088be17c838 The OpenSSF Package Analysis project identified '@fdp-tools/observability' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

CVE-2024-47555

creationtimestamp| type| source ---|---|--- 2024-10-07 20:58:59+00:00| seen| https://t.me/cvedetector/7257...

MAL-2024-9102 Malicious code in protobufj-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ed062cce3f1c6c84bfdb6183ed9db3baafed65d7695929d1747b34a9dcdbba8 The OpenSSF Package Analysis project identified 'protobufj-cli' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-46310

creationtimestamp| type| source ---|---|--- 2024-10-07 04:26:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8693 2024-10-07 13:11:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8697 2025-01-13 19:14:31+00:00| seen|...

PT-2024-26083 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Oct-2024 Release 1 in select Android 12 and 13 Android versions prior to SMR Sep-2024 Release 1 in select Android 14 Description: The issue is related to improper access control in the ActivityManager, allowing...

MAL-2024-9100 Malicious code in o-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc143165633782b48a2d1e1f1d68c10256845041b7b67b0b8c8410107e1ed3f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9096 Malicious code in app-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d98b7aa0eb79bf02f2a4aacf2f8a02611ac609640346bb46294561925dbf0c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9094 Malicious code in bolteu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bd2a7cf68d796d1274d10ce0e343341543e85f964224249a958802918b2482b The OpenSSF Package Analysis project identified 'bolteu' @ 8.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-9091 Malicious code in vue-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af79d6208188b1a6f878e404ecc5d2609b1bbd40511af1c30e8f6124d5431de7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9087 Malicious code in @linx-ui/pharmacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...