PT-2024-19190 · Sound Research · Secomn64

Name of the Vulnerable Software and Affected Versions: HP PC products using the Sound Research SECOMN64 driver affected versions not specified Description: The issue concerns potential vulnerabilities in the audio package of certain HP PC products that use the Sound Research SECOMN64 driver. Thes...

The vulnerability of the storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the data storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E is related to the use of a non-unique TLS certificate. Exploiting this vulnerability allows attackers to carry out “man-in-the-middle”...

Malicious code in koho-charity-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c05a6b955dc437e0c2b04e5972bf13ca55b00a97a48fe3d7cf1fa40a2f7b3abf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24409

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

CVE-2024-24409 Privilege Escalation

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option...

Malicious code in solara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e438962687b438b87b87f8223d415da1ee3726954b8fd23aa3bb8a866f1eec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteerscroll-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef54ed97acfe5ef98e20301d2c06ccf2391055cb225e5c1cc48bc06950e82d6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ea1a7c96683b60d54de7b649e94461921dec57d5df019d8764439db87971ab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openzepplin-solidity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96160503f6efd74b51cbb0434c82e4d7e8e07d087e3d9578d56ab5563071bcd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a820694573667cc1e95ff7cda09c9a823901bbb9ab2cf03ee94f500ae3fe854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gnache-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb71996ea970cd158615c28425049fe75cde7631e0e94d80887b9df113ab876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeteer-screen-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b0093b526d3b4549702cd0e61fb30db7ac24b4896657f7453d1150c91217bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10400 Malicious code in puppeteerextraadblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea15982594b3c0ee11b75fafa2d53989ad4886431573b72c71fe97a48dc7541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-extra-stealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37fbc6ab229a243ce69502d1a45b114b8b4c6318a961389367378d664f35b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10276 Malicious code in princedevmd1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5e6c2e25296a36f3923783f37ad2d8bc6e4ee785afcd14f29978aecbd8e54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-blue-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25cdf24ea56c6768c56579fca642bb9bf9510233ad5c87f48f9ec0cfc336c8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44280

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system...

Malicious code in meso-event-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79c3ff4f9e728af1f55032123d3c43887f3d0e183e4944c0d9a489c6259759 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in req-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9a1ab6f28d706cb286af274f9118a3e68076a1daca8d0c34a9499b9cbca5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visma-connect-bv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005faae12170fc7458fde90c1e389106818e875219f93719065488d5f10ff95a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...