CVE-2023-48082

Nagios XI before 2024R1 was discovered to improperly handle API keys generation randomly-generated, allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate...

BIT-GITLAB-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

MAL-2024-9275 Malicious code in mallutrojan1002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33b70fdcdd4f04f7c9f3c54ffb09557c23d65d978a70168754e3a8ac82e2040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9277 Malicious code in opti-distube (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af3574daa38d327bf074dc23f3627c241c0258ea93709ea388218ec157ad828 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9273 Malicious code in cbdev2024test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4fe76ee823f88ab6484802e30511e9103d6953aabe83c7758dfd4197613fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitLab 11.4 < 17.2.9 / 17.3 < 17.3.5 / 17.4 < 17.4.2 (CVE-2024-5005)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user SSRF in Analytics Dashboard Viewing diffs of MR with conflicts can be slow HTMLi in OAuth page Deploy Key...

GitLab 11.6 < 17.2.9 / 17.3 < 17.3.5 / 17.4 < 17.4.2 (CVE-2024-8970)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user SSRF in Analytics Dashboard Viewing diffs of MR with conflicts can be slow HTMLi in OAuth page Deploy Key...

GitLab 12.5 < 17.2.9 / 17.3 < 17.3.5 / 17.4 < 17.4.2 (CVE-2024-9164)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user SSRF in Analytics Dashboard Viewing diffs of MR with conflicts can be slow HTMLi in OAuth page Deploy Key...

MAL-2024-9230 Malicious code in duckc2-v5.3.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1787f323cf8287cce75c9f98309dbf5edfb1721a840a920500ec0e0cdb6be06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9229 Malicious code in duckc2-v5.3.5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375fe67ac59d8abd545809431db7b3e818c78cd1e2d0798eaff2cad2f48069ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9227 Malicious code in duckc2-v5.2.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 312f10b261529061f06f146485b626f5ac5f86887bd775baa9cc015f430d1e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9224 Malicious code in duckc2-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b9838006c36dd7525551f1e1b25b9140f9e30f9b644c64619d7735696b986ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9222 Malicious code in duckc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c8da6dab980dc3b48d5d97fb6494c628bce931b908b10cdaaa4e0659d6dd25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9254 Malicious code in sukuna-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40c28070648a48cc88a94d5ad2595df8a698f689504e6dbd8f3800fa2e84f658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9223 Malicious code in duckc2-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ccae9bda706300a8078341f64a00c3eeb0dc539eb2d138274eb7b41487169a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9623

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

UBUNTU-CVE-2024-9623

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...