MAL-2023-8683 Malicious code in rechtspraak.huwelijksgoederenregister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cf3169f51f3ee6c09021cf60f11a4171fed6a0655488a89f8b916c949cbd03b The OpenSSF Package Analysis project identified 'rechtspraak.huwelijksgoederenregister' @ 0.12.0 npm as malicious. It is considered malicious...

MAL-2023-8676 Malicious code in privalia-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67798a086ab24af2e15f2344e63c54848b44d2abe2edb6adf1834f8dfae7be55 The OpenSSF Package Analysis project identified 'privalia-app' @ 3.0.1 npm as malicious. It is considered malicious because: - The package...

Insecure and Inflexible Forwarder Approval Mechanism (Full Access Grant)

Lines of code Vulnerability details Impact The current implementation of the onlyApprovedForwarder modifier in the Ocean smart contract has several negative impacts: 1. Security Risk: Users are exposed to a significant security risk if their forwarder is compromised. An attacker can exploit full...

Malicious code in react-hook-form-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The U.S. Cybersecurity and Infrastructure Security Agency CISA warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers. "The vulnerability in ColdFusion CVE-2023-26360 presents as an improper access...

MAL-2023-8666 Malicious code in react-dom-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d4cfe9e9636852d3f77e9d66db174963751bf0c61eb2364bbee74ddff0b84c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8665 Malicious code in bitboxapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ac7326795e975d78c457b2260890b2b63220fd6ae8491a0f86708c32fddd1b9 The OpenSSF Package Analysis project identified 'bitboxapp' @ 1.9.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-42574

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...

CVE-2023-42574

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...

Improper access control

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...

CVE-2023-42574

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...

CVE-2023-40095

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40094

In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40095

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-45777

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

CVE-2023-40095

In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40079

In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in ng-iw-auth-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b2c0e798068a786168885e29f151a6f4e1b231ce79af7c664d83c5774ed1ce6 The OpenSSF Package Analysis project identified 'ng-iw-auth-tools' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8655 Malicious code in pdf2htmlex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7fdad8330a64af4a946fe1ba37ed64c71c1185fa07ff7dba06646f64fc0cc26 The OpenSSF Package Analysis project identified 'pdf2htmlex' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8653 Malicious code in astar-ci-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6a993eb0841db0ddd08de25ab3fc6aacace2d394a40bf1cece2476b76549b1e The OpenSSF Package Analysis project identified 'astar-ci-scripts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...