Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b7f742e51b1f9267457dee789b8075b86508058e76c06bb532d89c9c8d5808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-4181

The CVE-2024-4181 issue affects llama_index (RunGptLLM class) version 0.9.47 used by RunGpt framework to connect to LLMs. Root cause: unsafe use of eval enabling a malicious or compromised LLM hosting provider to run arbitrary commands on a client machine. Impact statements in sources indicate th...

Malicious code in agencyportal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f01ab5c8d151da175f79cd0379f0f4d714ddceb4075503d821ee2f05515d1cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914

CVE-2023-50914 is a local privilege escalation in GOG Galaxy (Beta) IPC between GalaxyClient.exe and GalaxyClientService.exe. From 2.0.67.2 through 2.0.71.2, an authenticated user can forge IPC packets via FixDirectoryPrivileges, altering the DACL of arbitrary system directories to grant Everyone...

Malicious code in pardonbeefconfession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81ea718272d3ee7ab9a60a488478726e2315992d23324f21ae8cee54bfc6709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96fd7c2ffaf602629b98fecc493fbe4ac073420940d2b37155e7ba170062e676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/turbo-octo-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd870e9a4b756cffdd1e5cfba86cd8edb34d34c9ca9467057155fc0e9b0d750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/animated-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5bc261dc8812f73e104f998024da20056b718ee5c8c3c4073e13d1ee704cab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in u-workflow.auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d832a1e0e53f214bdd5e2066f8bdfad1a477ae82de0049f234f15e1a30807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb6f5d0d440575be958acf30cdad5674315b1be245f2459de868d74f09516ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-2244 · Ivanti · Ivanti Standalone Sentry

Name of the Vulnerable Software and Affected Versions: Ivanti Standalone Sentry versions prior to 9.19.0 Description: The issue is a command injection vulnerability that allows an unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within...

Malicious code in pod-consumer-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790a64f75aa99c50c9bf2260bbd26b07020cf459a31f214e1a6a6c1336b62c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in liquity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4b0656498122960a3dfed802920c3ae8d545955f077fb818b5f9995a5964e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1054 Malicious code in win32crypted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a20fa9d2f01c5cc1893bbe4cfe5659f6bba9ce4dff54b741dbc46f5ded5402dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-rv-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0f336c3e2ea33ad54b11ffc09c8c393d4a13bf84daabe5383d4b18ae4e683d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vtuanhihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beb3ff692f6cbb63f5bbb6a7875f7dcbd21bae8d980a457f6b8ff5a685185bbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Rapid SCADA system, which stems from the use of rigidly encoded account data, allows a intruder to gain full control over the system.

The vulnerability of the SCADA system Rapid SCADA is related to the use of rigidly encoded accounting data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the system...

Malicious code in distube-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48479b3c983fc83e29cd20bafa1614ca1620036eab32699c38fa083b5b0ed816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...