Malicious code in onetime-rnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f949fd70a8bdf3174426072e1eac3d15e0b00c6ec57e0d3cf0a3ef45ca79ea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15998 Malicious code in onetime-rnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f949fd70a8bdf3174426072e1eac3d15e0b00c6ec57e0d3cf0a3ef45ca79ea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview onetime-rnd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2026-13501 Malicious code in delivery-ci-jira-rnd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9178cec9a952384e307589c3d50840761b3c260ced53213ec8a02f85f629bfd9 On require of the package, index.js loads bridge.js which selects a platform-specific endpoint and downloads a binary over HTTPS from Cloudflare...

EUVD-2025-37526

Malicious code in kb-rnd-package npm...

MAL-2025-49346 Malicious code in kb-rnd-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6374955bdacce96b2f2d1722875f0dc31dfc487a32101fad85241e8b64a4d2 The package kb-rnd-package was found to contain malicious code...

Malicious code in kb-rnd-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6374955bdacce96b2f2d1722875f0dc31dfc487a32101fad85241e8b64a4d2 The package kb-rnd-package was found to contain malicious code...

CVE-2025-44958: Storing Passwords in a Recoverable Format

RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...

CVE-2025-44955: Use of Hard-coded Password

RUCKUS Network Director RND before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password...

CVE-2025-44963: Use of Hard-coded Cryptographic Key

RUCKUS Network Director RND before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key...

DEBIAN-CVE-2022-49698

In the Linux kernel, the following vulnerability has been resolved: netfilter: use getrandomu32 instead of prandom bh might occur while updating per-cpu rndstate from user context, ie. localout path. BUG: using smpprocessorid in preemptible 00000000 code: nginx/2725 caller is...

PT-2024-35591

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.5 Description A vulnerability has been resolved in the Linux kernel where the sync linked regs function must preserve subreg def. Range propagation must not affect subreg def marks. If this issue is not...

SUSE CVE-2016-7424

The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file...

kernel: netfilter: use get_random_u32 instead of prandom

In the Linux kernel, the following vulnerability has been resolved: netfilter: use getrandomu32 instead of prandom bh might occur while updating per-cpu rndstate from user context, ie. localout path. BUG: using smpprocessorid in preemptible 00000000 code: nginx/2725 caller is...

PT-2022-7528

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description The issue is related to the function gnutls rnd in the GnuTLS package used by Samba, which generates insufficiently random values. This can potentially allow an attacker to gain access to...

Malicious Package in angular-material-sidenav-rnd

Version 0.1.1 of angular-material-sidenav-rnd contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module is found...

GHSA-QMXF-FXQ7-W59F Malicious Package in angular-material-sidenav-rnd

Version 0.1.1 of angular-material-sidenav-rnd contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module is found...

PT-2020-21465

Name of the Vulnerable Software and Affected Versions angular-material-sidenav-rnd version 0.1.1 Description The issue concerns malicious code in version 0.1.1 of the angular-material-sidenav-rnd module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and...

Microsoft Internet Explorer 11 (Windows 7 x64x86) - vbscript Code Execution

Microsoft Internet Explorer 11 Windows 7 x64x86 - vbscript Code Execution Dim lIIl Dim IIIlI6,IllII6 Dim IllI Dim IIllI40 Dim lIlIIl,lIIIll Dim IlII Dim llll,IIIIl Dim llllIl,IlIIII Dim NtContinueAddr,VirtualProtectAddr IlII=195948557...

Malicious Package

Overview Version 0.1.1 of angular-material-sidenav-rnd contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module i...