MAL-2024-1492 Malicious code in @juiggitea/sint-quos-placeat-laudantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e056be5c4f584e4d96540ee53065c6e994cf69ec59714403edf96cc09d9d7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/officiis-unde-qui-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 102860266a10b155fb025a65808b77045f098ac9fb1d4630845fb81d55a4619b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1464 Malicious code in @juiggitea/officiis-unde-qui-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 102860266a10b155fb025a65808b77045f098ac9fb1d4630845fb81d55a4619b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nobis-reprehenderit-ipsa-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdf1847b5392d59bb960c0fb31fb98e4a834a084b91176f8938fea0b8bf99ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1451 Malicious code in @juiggitea/molestias-eos-quae-saepe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95793c6a82675610530b27b5ea0fd91a1c9e8922ae81dbb320d6541522fcefcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/molestias-quo-nihil-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9460ce6b7a5e9c2646ba5c2a4dff77162e5267b476b027f8fcd99d70eb18c156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/architecto-voluptas-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98cfb65f49141dbfeee3f067591407b316474e7b29c110ab5146a44c040cfca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b7f742e51b1f9267457dee789b8075b86508058e76c06bb532d89c9c8d5808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-4181

The CVE-2024-4181 issue affects llama_index (RunGptLLM class) version 0.9.47 used by RunGpt framework to connect to LLMs. Root cause: unsafe use of eval enabling a malicious or compromised LLM hosting provider to run arbitrary commands on a client machine. Impact statements in sources indicate th...

Malicious code in agencyportal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f01ab5c8d151da175f79cd0379f0f4d714ddceb4075503d821ee2f05515d1cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914

CVE-2023-50914 is a local privilege escalation in GOG Galaxy (Beta) IPC between GalaxyClient.exe and GalaxyClientService.exe. From 2.0.67.2 through 2.0.71.2, an authenticated user can forge IPC packets via FixDirectoryPrivileges, altering the DACL of arbitrary system directories to grant Everyone...

Malicious code in pardonbeefconfession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81ea718272d3ee7ab9a60a488478726e2315992d23324f21ae8cee54bfc6709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96fd7c2ffaf602629b98fecc493fbe4ac073420940d2b37155e7ba170062e676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/turbo-octo-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd870e9a4b756cffdd1e5cfba86cd8edb34d34c9ca9467057155fc0e9b0d750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/animated-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5bc261dc8812f73e104f998024da20056b718ee5c8c3c4073e13d1ee704cab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in u-workflow.auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d832a1e0e53f214bdd5e2066f8bdfad1a477ae82de0049f234f15e1a30807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb6f5d0d440575be958acf30cdad5674315b1be245f2459de868d74f09516ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-2244 · Ivanti · Ivanti Standalone Sentry

Name of the Vulnerable Software and Affected Versions: Ivanti Standalone Sentry versions prior to 9.19.0 Description: The issue is a command injection vulnerability that allows an unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within...