10121 matches found
Malicious code in sol-instruct (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1476f5fb9d2cca155c1adb783b39f5fce22901480eb717733ed7e687bfd978f2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: -...
The vulnerability of the New Activity Handler component in the virtual learning environment Moodle, which allows a perpetrator to execute arbitrary code.
The vulnerability of the New Activity Handler component in the virtual learning environment Moodle is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the Field Name...
kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2024 Release 1 prior to version 1, which stems from an improper access control issue...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue in clickAdapterItem of SystemUI...
MAL-2024-7061 Malicious code in prpc-client-instance.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...
ASB-A-317048338
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
MAL-2024-7058 Malicious code in kiln-desktop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7057 Malicious code in bageth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb1afd39be45104caed0892ba1fa5631e23807d2aa84d0981af466570efd384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bageth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb1afd39be45104caed0892ba1fa5631e23807d2aa84d0981af466570efd384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in starter-assets-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in myvaroniswebapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95a8c770161229d39bc64eb95c2d17829d937cc25c14b9472e2e5c87ffb69b00 The OpenSSF Package Analysis project identified 'myvaroniswebapp' @ 200.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1665 Malicious code in fing-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e606602dc2c4b6d0550d90156a68cf31799054412bac90062d266e5bcad3d76 The OpenSSF Package Analysis project identified 'fing-react-components' @ 1.15.0 npm as malicious. It is considered malicious because: - The...
Cross-site Scripting (XSS)
moodle/moodle is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to improper validation of user input in the "Field Name" parameter associated with a new activity, which allows an attacker to perform XSS attacks...
Malicious code in @amops/fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9eb323a3c294832e925d2ed472560ab37507fc32711add225d99db97b08bc74 The OpenSSF Package Analysis project identified '@amops/fetch' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1660 Malicious code in @amops/fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9eb323a3c294832e925d2ed472560ab37507fc32711add225d99db97b08bc74 The OpenSSF Package Analysis project identified '@amops/fetch' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1649 Malicious code in melichat-component-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7d152708054848a62109924487b7dcacac50e054b19a8682b3b0b26b279e6b The OpenSSF Package Analysis project identified 'melichat-component-library' @ 1.1.0 npm as malicious. It is considered malicious because: - The...
CVE-2024-37674
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name name parameter of a new activity...
