MAL-2024-8747 Malicious code in bitcoin-sign-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f9bac919ce1d304232e5c64601a20dad72ee9131683b31b35162d6717d84a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8755 Malicious code in crypto-dbc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed7516f7b04cb30a657408510b2c4eae664f2afc8d420599986b586f167c4d63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8798 Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8788 Malicious code in nginerrer-web-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cebffceb78bdb2f84e42e92350d51334a89f0f543977e469c226c40ca2601117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8789 Malicious code in noierrdev-web3-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14f9382fba3dcadd586ff8f180635d961bfea64bc4b45d82e8247d783c51f656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8787 Malicious code in my-css-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298ca2272cc6f26147224e4456d149054ba81f25d334cab1333a3ac9459d3faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8767 Malicious code in grand_xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce59c91d382e007649de4140fb5dd97f67594f864a0ca288c188c27d5bdf5dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco Duo Epic for Hyperdrive 安全漏洞

Cisco Duo Epic for Hyperdrive is an application from Cisco. A security vulnerability exists in Cisco Duo Epic for Hyperdrive that stems from improper storage of unencrypted registry keys, which could allow an authenticated, local attacker to view sensitive information in plaintext on an affected...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a cryptographic key disclosure vulnerability in the KEYS: trusted: dcp component...

The vulnerability of UEFI microprogramming, which is related to the possibility of using hard-coded platform keys, allows a hacker to execute arbitrary code before the operating system loads.

The vulnerability of UEFI BIOS relates to the possibility of using hard-coded platform keys. Exploiting this vulnerability allows a hacker to execute arbitrary code before the operating system loads...

CVE-2024-45678

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack that requires physical access and expensive equipment in which an electromagnetic side channel is present because of a non-constant-time modular...

MAL-2024-8717 Malicious code in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fc256bc2ec352c5c3f508243cd7ca95fcc61510287dc1dc8a687cc12f6ec9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8712 Malicious code in dowload_ebok_farouche_atalante_by_emilie_druilhe_nx2bj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79c4837467a6a1cd6dab8ea3527e540fb19423a81cccac5e916eab5ad9fee997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8718 Malicious code in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2c3c51b9a2299a8d75d9bedd630252bc337635de7b3c44c0d1da0054fc71de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8714 Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee471b163c12366bb71dcefa110286c5a5ea8c0cfd9faf231c4f9cf8f9be081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8710 Malicious code in assistance-finder-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736cb085b408315e3153f05af689db208cc6cd59cda88238c550b56a34e55a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8720 Malicious code in muthuhacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1182ad621bb84725caaefb330e0f2c7826ba7a78894d1f5a207d0daf17bf0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8721 Malicious code in muthuhackermc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09a7667143c706293523d827f0f87172a810da00d589eb4199a5758aed61390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8723 Malicious code in wekan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364accf2b084493722b67d10a835ba3f2ac5a70cb79038e1bdad1f6fb1bf71cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31598 · Unknown · Authenticator

Name of the Vulnerable Software and Affected Versions: Authenticator versions prior to 8.0.0 Description: The Authenticator browser extension generates two-step verification codes. In versions prior to 8.0.0, encryption keys for user data were stored encrypted at-rest using only AES-256 and the E...