Malicious code in puppeteerscroll-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef54ed97acfe5ef98e20301d2c06ccf2391055cb225e5c1cc48bc06950e82d6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10522 Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10498 Malicious code in client-req-scopes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10526 Malicious code in valomemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c766f5074a741d52acff64d70b735707af99e18eff8bd842be0d39ab5f138c0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10513 Malicious code in lavora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707162c11004cd37c42afb9285c941fad905c97a1354411a3e02b1c86a2d3727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10523 Malicious code in shoot-gk24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0950a3a90a94f8ce6e8749818a013883122422bd6416a7a25861d64a56d07b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10504 Malicious code in eth-namehash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d452768b56606d477eca9809571e5b58bd741bf13fd144d6f510d114cf030ad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10530 Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webb3-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aaeecf6e2f692d69483d7fe98783533279175704f115f53cbf1bfa223a08a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10533 Malicious code in webb3-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aaeecf6e2f692d69483d7fe98783533279175704f115f53cbf1bfa223a08a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10528 Malicious code in wb3cor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41fd550009a844200a91b81b4e21680cbab0fe005430dcc07434e1aeffa44a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10509 Malicious code in ethers-multicaal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a3ae6518d1268c8a0dd1eedcc72da3fb1c5f939868743ea2699108f1d3741b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10524 Malicious code in soliddty-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a13484b0e2e85db21c7eeb00780979759f8c9dcd5ca71c3903732607ee9686 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-10567 · Phpexcel · Phpexcel

Name of the Vulnerable Software and Affected Versions: PHPExcel affected versions not specified Description: The issue concerns an XML External Entity XXE vulnerability. No specific details about affected devices or real-world incidents are provided. Recommendations: At the moment, there is no...

CVE-2024-20531

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery SSRF attack through an affected device. To exploit this vulnerability, the attacker woul...

CVE-2024-20531

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery SSRF attack through an affected device. To exploit this vulnerability, the attacker woul...

CVE-2024-20531

Cisco Identity Services Engine (ISE) API is affected by an XXE-based vulnerability in XML input handling, allowing an authenticated remote attacker with Super Admin credentials to read arbitrary OS files and perform SSRF. Root cause: improper XML External Entity processing in the API. Exploitatio...

CVE-2024-20531 Cisco Identity Services Engine XML External Entity Injection Vulnerability

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery SSRF attack through an affected device. To exploit this vulnerability, the attacker woul...

MAL-2024-10443 Malicious code in web-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e01b5c7e434c166fc697d6c13f5aee669e57506125bea0d9639ef863220d2076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...