MAL-2024-8721 Malicious code in muthuhackermc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09a7667143c706293523d827f0f87172a810da00d589eb4199a5758aed61390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31598 · Unknown · Authenticator

Name of the Vulnerable Software and Affected Versions: Authenticator versions prior to 8.0.0 Description: The Authenticator browser extension generates two-step verification codes. In versions prior to 8.0.0, encryption keys for user data were stored encrypted at-rest using only AES-256 and the E...

CVE-2024-28100

eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...

CVE-2024-28100 Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftw

eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...

CVE-2024-23362

Cryptographic issue while parsing RSA keys in COBR format...

CVE-2024-23362 Improper Input Validation in Trusted Execution Environment

Cryptographic issue while parsing RSA keys in COBR format...

CVE-2024-23362

CVE-2024-23362 is a cryptographic issue in Qualcomm closed‑source components related to parsing RSA keys in the COBR format. The vulnerability is tied to the Trusted Execution Environment in Qualcomm chipsets and is tracked across multiple feeds (Red Hat, CVE databases, and vendor bulletins). The...

CVE-2024-23362 Improper Input Validation in Trusted Execution Environment

Cryptographic issue while parsing RSA keys in COBR format...

Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8509 Malicious code in @diotoborg/optio-maiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e63734bd6e69b5e2e97d770c36121cea4539199bda93418ade7b28048470d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8167 Malicious code in @diotoborg/autem-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239c77c66f6ccb8f7dcbcbd73746657981045cbd106678133760ac1a486b680c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8635 Malicious code in @diotoborg/sit-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5df872f2f927576a8a09127da72400b0228dd051f635b6572ce6765633693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8555 Malicious code in @diotoborg/qui-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f243a58b4aa9f4d920344bfda2e796cabe4e84ee646647779f6aa42e3d23c95e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8469 Malicious code in @diotoborg/nisi-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce94c72285692d867ccfc75edc46f00ec096c171314f7734e37817b15d9bcbca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8393 Malicious code in @diotoborg/labore-inventore-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1c0726be258c93a40ad59209bb0af007a6d61c3f47723c61abccab0ec6d2c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8366 Malicious code in @diotoborg/incidunt-quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53c38ec99f63ebcd9a1bb587c921c274519557d23228056e69875fb7a3e5cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8426 Malicious code in @diotoborg/modi-necessitatibus-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b36f6a98ee6692d609eed5e863813239c394706f4f8f7c951e9d52552e1a6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8704 Malicious code in @diotoborg/voluptatum-repellendus-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7f274ec7d84edbc659375bd76d04ca0ae86c9b86aad3e5fec70d70b6200943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8455 Malicious code in @diotoborg/nemo-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dc1bc1c432934e97b6a1fd2e19453c9d2381b91ab862b179dc8b24492333a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8687 Malicious code in @diotoborg/vero-quaerat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5d803035d0708d3e5097f172dcffec0e8fd9dcf7cf966310d86bc14fcc8357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...