Malicious code in so-loader-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eeddffrrvvrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edf204dbf60840297b627dddc89859ee1cae2d2104608731665d180291a0074f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-authorizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b198073a3c6c8c48eaa78a60790eebe24d1bce34d24bdcbba4e0f077f329c56b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-priyansh3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd0e5c080a7eaaffbca2eaab0a8d833f9f08cb3b4a122235e6d1c61adb46a0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fbthinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8a9968da7e6b0c165c9ac85f48d26f19e61a94db854c36fe618159e95cbf34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gradient-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7856f4d5db8c9074c3633d2d5a61782c18536a58a84cb8ad56ae029525880875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43634 Config Partition Not Protected by Measured Boot

When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous project, CYMOTIVE found that the configuration is not protected by the secure boot, and in response Zededa implemented measurements on the config partition that was mapped to PCR 13. I...

Malicious code in @zettle-bo/staff-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6890c2d23d73e43eaf40b3d6435083b993f77894876b67b4a2ea41c9a223f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0773

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerabili...

Malicious code in @cat-abdulla/fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6756f1d86478050a5d2c651a1ef83e1f151c21b753785868a0beac0d401b3ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc057d5c15cbb841971a77ec214defaaa36bdd16dccbba8fdd162bcc41e26b6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f4752df8304622adf069f9684bf8006f25e596ce72432257c6a779453f7f008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8151 Malicious code in telia-front-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915e7468494f50f3f273a20457aa01b3aec6e0f5cae88024b0db7ec5246c32aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20230911-07

A vulnerability in the Moodle virtual learning environment is related to insufficient validation of user input data. data, an attacker could send a specially crafted HTTP request and make the application initiate requests to arbitrary systems. Exploitation of the vulnerability could allow an...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

Design/Logic Flaw

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...