CVE-2024-9142

CVE-2024-9142 affects Olgu Computer Systems’ e-Belediye prior to version 2.0.642. The root cause is incorrect permission assignment for a critical resource, enabling external control of file name or path and allowing manipulation of web input to file system calls. According to connected sources, ...

MAL-2024-8926 Malicious code in pring-payment-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3eed32902e1265a8b45d6189699734582790383eb848542f28396763e05ca31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8901 Malicious code in evm-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c91e468e1cf1503476c51feda4ab0bfb701bc195a5b682801c9182256704b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Nomad application orchestrators, related to improper external control of the file name or path during data loading, allows attackers to create archives that unpack files according to paths outside the expected distribution directory.

The vulnerability of Nomad application orchestrators is related to incorrect external management of filenames or file paths during data loading. Exploiting this vulnerability allows an attacker to create a archive that unpacks files using paths outside the expected distribution directory...

CVE-2024-8754 External Control of Critical State Data in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to squat on accounts via linking arbitrary unclaimed provider identities when JWT authentication is...

Malicious code in evolution-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 319dd750e62370dfbc8bfdc0a3a2abcf5492d5a599b1a6c67a08ac126170df8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwieuor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2cbc673e05c4390b6cd2ec1907ab9c70242a26d924f3c307cb19e894d99ec5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/voluptas-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb2634112356d45f74f3822a4964ae5b2dc5c5061c240df9b26b835f34b06ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quod-similique-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfacda54c4e260f73c671cefedd4ba06cfc06fc063a800ab5e73fe566d73baf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-perferendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e60b07d695b1fcd09ec10b96688104dfd5cc8941dc7e2f2405a330c16f28f5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/incidunt-odio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5286c9fb5698bb87e2bd6bc31058c902bf0323a0d70d926986b5c5eb0a7748c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/minus-alias-quisquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb0692a30fed5b3b431b67815284bc2530a34430a8dd04267f6a8bc3b5c08af6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/officia-labore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265ae1d962fb5f3a65be2a3fa5be19458ada059dc3595364f339fe68292b810b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/reiciendis-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c52db2963834b32444f193ce3df5216ec689c7e80bf0a909cce2a61cf348728c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/labore-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcca26bb0751f3be684c51140f6845a429d8b96f24778e5da1b96797be4c435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eos-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce102c4972b37b303b2e013794f1674ce9a529b5456a5fed48cc62fd501769f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quis-facere-repudiandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e09eaaecbb99ac056282d303bb1f9115f2ad2146dc697e85df18970b6c058ea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/numquam-veritatis-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a945017ce6596516e6b0877b4f6c00af4650a99f7b9643751fc00f91de6ab280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/magnam-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51ed0e9b30c9399833eb33cea5cd43d961126730ad93e8119a47bfdb2a7697d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eveniet-fugiat-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1a19857ff3b2fb4c8a77a37c2d48b75e9a763b96b0ba82df890faa99f90875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...