MAL-2024-8686 Malicious code in @diotoborg/vero-eligendi-deleniti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a6946b52d43f1e7cb373cf196f3f287b8b95ca4803974f4fb3464ccd59736a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8298 Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8527 Malicious code in @diotoborg/provident-accusamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1add6a745f4be527bd396ad496b468c62373ae40cd7efb067e7f299367e77b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8523 Malicious code in @diotoborg/placeat-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18f53d5e7a936c864819ab227060382e92d28e3a92202defe1920696f512654b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8224 Malicious code in @diotoborg/dicta-recusandae-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec79f36c2a8336b9840f24bfc59847acfb4e18a7909792f533ece2397a29d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8358 Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8319 Malicious code in @diotoborg/ex-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e30f0f24bcabf5b6bce5083307e9ba4d5f6aadd051592bbf5f715d455792651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dicta-recusandae-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec79f36c2a8336b9840f24bfc59847acfb4e18a7909792f533ece2397a29d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8670 Malicious code in @diotoborg/vel-labore-incidunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a51e7a3e943bacf0ec4e05fabbc4d63cd9366774a2777611041e9163b322c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8311 Malicious code in @diotoborg/eum-tempora-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d4b1d168bf71f91f6262c1c46d9722df779c8dd61ca554a9e142dcae0b2b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8185 Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f213e5ae0b66204727b039d73a0c80ce3554366c5cfe52e65f43fc9da97cd90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8244 Malicious code in @diotoborg/dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594648a6e233b1180f89cb194e6ddf0cebf9f265ae0f11b2b6d13533ccfc1d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22265 · Elabftw · Elabftw

Name of the Vulnerable Software and Affected Versions: eLabFTW versions prior to 5.0.0 Description: The issue allows a regular user to create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application by uploading specially crafted files. Thi...

ASB-A-336976105

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...

TYPO3 Winstaller Default Encryption Keys

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TYPO3 Winstaller Default Encryption Keys', 'Description' = %q This module exploits known default encryption keys found in the TYPO3 Winstaller...

QNAP QTS and Photo Station Local File Inclusion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'QNAP QTS and Photo Station Local File Inclusion', 'Description' = %q This module exploits a local file inclusion in QNAP QTS and Photo Station th...

Ubee DDW3611b Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Description' = %q This module will extract WEP keys and WPA preshared keys from certain Ubee cable...

Netopia 3347 Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netopia 3347 Cable Modem Wifi Enumeration', 'Description' = %q This module extracts WEP keys and WPA preshared keys from certain Netopia cable...

Cambium EPMP 1000 SNMP Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium ePMP 1000 SNMP Enumeration', 'Description' = % Cambium devices ePMP, PMP, Force, & others can be administered using SNMP. The device...