Design/Logic Flaw

An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript payload that runs in a browser or app without user interaction or consent. This allow...

MAL-2023-1317 Malicious code in tempomati-omega-69-emcuf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a012c605870034511688f664880e997bc8423cd7707f3de28326adc144f4fb4a The OpenSSF Package Analysis project identified 'tempomati-omega-69-emcuf7' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in tempomati-omega-69-emcuf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a012c605870034511688f664880e997bc8423cd7707f3de28326adc144f4fb4a The OpenSSF Package Analysis project identified 'tempomati-omega-69-emcuf7' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1316 Malicious code in tempomati-omega-5-emcuf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f86820db1cc72b3ab2076578417815de7e0bc83b54e954f68b41a7adf28dd66 The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf5' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1315 Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1352 Malicious code in zsbpwebsdktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 347bc418b55e9092cd6a48ff3f93f328085fa2c4192ba6dc2c5cf062c3d10c20 The OpenSSF Package Analysis project identified 'zsbpwebsdktest' @ 9999.99.91 npm as malicious. It is considered malicious because: - The packag...

Malicious code in smart-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6 The OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1114 Malicious code in apache2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12b1a6eed914c86f199b052822217042e2afa047d6b1d9921fd30b56f1e5e650 The OpenSSF Package Analysis project identified 'apache2' @ 1.1.9 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2023-1266 Malicious code in plain-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e38d4006afc6d5a3ce531ced341af81b57134a68230e68e52122825f587260e The OpenSSF Package Analysis project identified 'plain-function' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1142 Malicious code in commentrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87db588ebd8e7a42cbbbbf7fc21caa36fc553172a0ff4c4e9a58ce9354d62e7f The OpenSSF Package Analysis project identified 'commentrating' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1153 Malicious code in diesel-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb78d01ad7ff8d210d59657017d35725abab41a1e59657ff43ac4ac0889ac493 The OpenSSF Package Analysis project identified 'diesel-site' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1278 Malicious code in rb-notification-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis faed09cda269c58908aa898798259bd292fcce98a8f5a60f486a4c26bb84d15a The OpenSSF Package Analysis project identified 'rb-notification-banner' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1318 Malicious code in testforconfusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0463d945d1cd3398ce2594034fd52775ac94fe411f1cc645f88f757522abfc1b The OpenSSF Package Analysis project identified 'testforconfusion' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in scuntest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f42cc62b8cee0d48d9ee1455debbb923baaab65c1fd45a70a726d6053cb36086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1180 Malicious code in falsepositivecheck6969 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef392714b654bd14df8ba24c491e8844b54e08fee392bff62632f7f3e5d6fa1 The OpenSSF Package Analysis project identified 'falsepositivecheck6969' @ 9999.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in donuts.node-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The...

CVE-2023-2388

A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument...

CVE-2023-1968 CVE-2023-1968

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications...

MAL-2023-1083 Malicious code in @infinitebrahmanuniverse/nolb-cys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78a6474d6dca65eeaf028b44be4065be5f545d63eba6905a3f4e1ae032f85a7a The OpenSSF Package Analysis project identified '@infinitebrahmanuniverse/nolb-cys' @ 2023.1.28 npm as malicious. It is considered malicious...