PT-2023-13367 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.2 and prior Description: The issue is related to an Overly Permissive Cross-domain Whitelist, which could allow an authenticated non-admin user to potentially exploit it and obtain sensitive...

Malicious code in thenamk3zg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52bcaf8a754f24d5679cb567cca3c9c6ab028ac369266cacf4ca6d4494f5c27b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reload-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9d76cc19bc57eec19d1d25f5033ac97363240cb901ec32959baf06e1c1fe3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-address-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5feb9e0be7037fdbecf7bb66bc86bef489c699497fb662d27506efc7f03889ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digital-staticsite (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7cf28f9b3aee1deb96e037e6f68421b07112de0026dc8406174bfc2f416ccd3e Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in deobfuscatorv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1e176e65ad21fbd16a057338f01560423427a7c78b473d94ae700afc4fc171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-hrz-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b42a9f434f83ad9b083b69c15d70efcc6a935e51b8b0e4a0ee178a7ea81592e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pooled-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bdc927e1bd63772731d89e3cd44a51e7fc1d3884ede8cea40821cf6bd0b984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-184 Malicious code in climate-warehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb03c4128835a9256b968cd63d617675ff8af803b43a908731d04f8b1b81151f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-27538

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2021-3808

Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities...

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP Company, USA. The HP PC has a security vulnerability that stems from a potential flaw in the BIOS UEFI firmware that could allow arbitrary code execution...

Malicious code in angular-mocks-1.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 625a13c6d2cc904b846cc79015624cac75f57596e17606b783aaa1ccb6dcb164 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tools-access-lego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fddb963172387b40e3adf0f4314fb8b30ed7c12d5d3cf70e1ceb7388987313bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-986 Malicious code in yandex-logger-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mini-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in delta-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccf1578d031db527a894c33da7eafd61638d10822d39d19172cb3572d18b72ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in images-inliner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab908bfacc86cb5a85edab7717c02f6e58433afd880e9928e8c67114b7af43e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...