Malicious code in jembot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fa34be5adeea13d20b8067e7e92d24bf893272a43504ecf7057c205e3ab5815 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-9174 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: A flaw was found in the Foreman project, specifically in the Datacenter plugin, which exposes the password through the API to an authenticated local attacker with view hosts permission. Thi...

U.S. Dept Of Defense: Host Header Injection on https://███/████████/Account/ForgotPassword

Dear DoD Team, I found one high bug on your another domain. This is from Hack US Program. Affected domain is https://█████/ An attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on...

Malicious code in synfc-wrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deb213d25fa208b2ce2da3a72504782d3e07e9fe3cab555626dcabf535760a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rollup-pulgin-comsonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e311c145a9753f0b9cb137dddc9e3bffb27b6cb502240c2b697d2028267ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in om-helers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f9a93e537b606ceb960bbf61b0d502d85663ffc0b57b50e4525329103a3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in path-to-reugep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e39404a1b450825b3150aacf79e5eaa18352085ba8ffd47c1cd8a4743bda371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lefko-pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78aaf506f6e99d6e64b0e74f83617500cdcd072a44a88caedc29a1a847fbbd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lkodash.isequa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09912439b85d640c788cfbb7169f63fb99ba6b8425a0c45db58402d89fe15f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lowashcamelcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d35f94a62c17599b8b2216a404d6802b42763c62aa15c9eb74fe0e1f53e552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddte-fdns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7f42dc939414e9b9b8fed26e977e624e73ca69de4887f80d219542de25b641 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fasclck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660c53cfb85a6a700bd046082a978aaf7483745fd4c9f96fcbaa21db536c0122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypt-osj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866ab4f1ee9ce8e2e4d4737ae37177fe6a206cc888d00e8d9b3af8e323434910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytebufevr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea5bddbe37e0bfafbe40547bc4d9cac64ed8b2d28073e93aa71b36a938de419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babfl-ie2mplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa01fa657eb1928f2ad638cf89f758ca0456a8a4fd14d843ef39074f70b23bd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f6a7a274321f3f3de3f98040f049649044c28e22a998df9fd2f3e3b7f05e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 2jasmie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94db8325f4e0c80d061a52502ee3c933ab674ad1c610036d8c1404921e52ab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...