MAL-2024-7910 Malicious code in @ampol/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7583d639bf7d61499f7cac9da21bc3a507a7af5a21d6ee198303de1e0383f009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8007 Malicious code in woodiorers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de2a81c56e9d9bb341fdfe18ba291124542c69c9831f6ddd857791696c538ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7998 Malicious code in uewopdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840acd749ca1cc60804a43acffb1a61e836448f4ac5759d429f3268dcdd2a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7966 Malicious code in jiworis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1123aec6d4dbdee29f1bb9f2914d16f0b88719c53d3533bd102bd17153693e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8008 Malicious code in yuriosid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1797849b8d6791e2dbf86f150f160140b8625b0a658a218f594253ce161dcad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7992 Malicious code in teiwosjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6603e4eb0efabf2f58234dae83f6477feb78b02fddfe5b3e0ce6988adaee2df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7956 Malicious code in fieorusls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368b270086b0df625cfccd2dc2249b032f6dd8a269b1948fffd65dccf042bcb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7961 Malicious code in hioesjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e448f6dfa1e36df6dac9355caaf3a0111d0a7c155b08d8add69b3f9bf8c29d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7977 Malicious code in nioskdue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c6a02b9e69d61396fbb608cc60e0158aee28b987cb4b4b447a27f1a7bca70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42062

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

CVE-2024-42062

CVE-2024-42062 (Apache CloudStack) : A permission validation flaw in CloudStack 4.10.0–4.19.1.0 lets domain-admins query all account-user API/secret keys, including those of root admins. An attacker with domain-admin access can leverage this to gain root-admin and other privileges, potentially co...

CVE-2024-42062 Apache CloudStack: User Key Exposure to Domain Admins

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

CVE-2024-42062 Apache CloudStack: User Key Exposure to Domain Admins

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

Information Disclosure

libgrpc.so is vulnerable to Information Disclosure. The vulnerability is due to an error status for a misencoded header not cleared between header reads, resulting in subsequent incrementally indexed added headers in the first request being poisoned until cleared from the HPACK table. This can be...

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7955 Malicious code in fabricexample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4137c5f31f16d594edda141045f7330412108a4d9bc3bb7f4786e8d6e4c09eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7941 Malicious code in bs58node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0bc63ca148e297326d229ab17cad2fe91c923308400c4027721533605fb2440 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7939 Malicious code in bignit.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b97d2fd30b80db3253e6999e0e6bbc4ba13e245a6eeb28a167f1eeeefec161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7940 Malicious code in bs58lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5203201dce86ff759e5c55007837099f74ef7bd7d925ebf3c4420106f5889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7995 Malicious code in theme-bahrain-nb-hdddc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22b870164e088eff8d02fbc7631e1a1635a1810965e38de6362e8d93dc02434d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...