Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/provident-accusamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1add6a745f4be527bd396ad496b468c62373ae40cd7efb067e7f299367e77b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in open-wuji-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b545c17e3e6d2e0a14f46b48f10fd15e2eda7222a6e82ead13d4391cfacd9c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-8207

In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server version 5.0 up to and including version 5.0.14...

Malicious code in digital-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9021abdb0634436cdfe28f725d1af0444e6737f285c2f2bcfe82a0b9e0359979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8036 Malicious code in platform-client-messaging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31517 · Gl.Inet · Axt1800 +4

Name of the Vulnerable Software and Affected Versions: GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 version 4.6.2 Description: An issue was discovered that allows users who belong to unauthorized groups to invoke any interface of the device, thereby gaining complete...

Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers

Cybersecurity researchers have discovered multiple critical flaws in Amazon Web Services AWS offerings that, if successfully exploited, could result in serious consequences. "The impact of these vulnerabilities range between remote code execution RCE, full-service user takeover which might provid...

Malicious code in dataminr-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e328eea4d3ddfdb430fb8afcd7384887956a95d03a3881cf61c63609b6ec2b3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankrate-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 857d78d4a0691e2714e3c43f0001af9777c66644e48d145cc3ef19976a4feb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wistia_namespace.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37411af0efaa1331025c7ba0aaa00b729cc7b5eb9425392726c6f2c7de602179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7980 Malicious code in orion-all-6.0.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69cdfcd30937378c6d65748e8691cd457c6371491dedb166400380429d98ade6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8006 Malicious code in wistia_namespace.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37411af0efaa1331025c7ba0aaa00b729cc7b5eb9425392726c6f2c7de602179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8002 Malicious code in uitk-react-scrollable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15932e6247991a719ff0f98bbb3b9d13ffa6458ac4bce5835a7a691f8b52a6e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coralui-support-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f192dd56f8538e6386f8ed29a314e1235df475bdb9630e5ec4b48b7bb8378fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kiwoeslw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bae85e2f36251f9936fb3b965298a113bd8e3f92666f152e5882d69c935545bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain full control over the application.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application through a specially...

Malicious code in permenmd-vps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a8748879a494a5092a0ad46e24169aed2ca197307e50d234d71b25dc7b4e1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taiwinders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dab44b2fa45e4dc1c7966fb53989bb8c53c203f15da117a99bcab2ce4d1125c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...