CVE-2024-0386

creationtimestamp| type| source ---|---|--- 2024-03-12 23:26:10+00:00| seen| https://t.me/ctinow/206259 2024-03-12 23:26:17+00:00| seen| https://t.me/ctinow/206266...

Malicious code in sap.m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15071ba5071ccb3930f175a5e0be10782050c544af995646c8a3141c15c17d51 The OpenSSF Package Analysis project identified 'sap.m' @ 1.52.5 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1080 Malicious code in sap.m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15071ba5071ccb3930f175a5e0be10782050c544af995646c8a3141c15c17d51 The OpenSSF Package Analysis project identified 'sap.m' @ 1.52.5 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1079 Malicious code in sempra-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 872da23eea679ab4d72067d48ca21e2f235cb67bd63e176842a5137a873d5f96 The OpenSSF Package Analysis project identified 'sempra-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bugcrowd-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46b2f058641ff9f8a06f7a20bd103fbfc37dc8ffcfc09d191ab7a8b9d0c35715 The OpenSSF Package Analysis project identified 'bugcrowd-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-1400

creationtimestamp| type| source ---|---|--- 2024-03-11 23:27:00+00:00| seen| https://t.me/ctinow/205131 2024-03-11 23:27:11+00:00| seen| https://t.me/ctinow/205139...

CVE-2024-22005

creationtimestamp| type| source ---|---|--- 2024-03-11 20:26:44+00:00| seen| https://t.me/ctinow/205025...

CVE-2024-23612

creationtimestamp| type| source ---|---|--- 2024-03-11 17:31:48+00:00| seen| https://t.me/ctinow/204891 2024-03-11 17:31:53+00:00| seen| https://t.me/ctinow/204896...

CVE-2019-19769

creationtimestamp| type| source ---|---|--- 2024-03-11 15:16:41+00:00| seen| https://t.me/ctinow/204769...

CVE-2019-18340

creationtimestamp| type| source ---|---|--- 2024-03-11 14:46:45+00:00| seen| https://t.me/ctinow/204741...

MAL-2024-1070 Malicious code in jitsi-meet-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d00022cc6b75ddc259b9fe60993dbdf646c17b30cce6a76c88798ca229947db The OpenSSF Package Analysis project identified 'jitsi-meet-electron' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-1068 Malicious code in global-min-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...

Malicious code in profectus-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062a69a64c4e77b2e5cebc7f5d21c239c51139c4d420c9fbf2e616f23ec838a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1066 Malicious code in dropdownformfield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2713d5570c40f202d4baa70c5d4b4a5ded51d6375ab052be5eb0a89de9d3e153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1065 Malicious code in accessibletrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8474de211a93f6609827bb3a4e63a05cba1f2124131efd6a9ddf34edb2f89ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ycs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fcf222dfcf6f0f36588b0c11a3e0fd28bac1b86cccc3eac8afb5f9243afffb7 The OpenSSF Package Analysis project identified 'ycs' @ 3.9.9 npm as malicious. It is considered malicious because: - The package communicates...

Update now! JetBrains TeamCity vulnerability abused at scale

JetBrains issued a warning on March 4, 2024 about two serious vulnerabilities in TeamCity server. The flaws can be used by a remote, unauthenticated attacker with HTTPS access to a TeamCity on-premises server to bypass authentication checks and gain administrative control of the TeamCity server...

Fedora: Security Advisory for plantuml (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: plantuml-1.2024.3-3.fc40

PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...

MAL-2024-1058 Malicious code in jaas-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e138921f13c1e6284e20c35908236f156dedf323860b924ccdfda713eb03b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...