MAL-2024-11028 Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11026 Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11105 Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11097 Malicious code in soybean-admin-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a6972781b662382399d2ae9303fb5c9213e1d475062dcb8c096bc7b07589c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11075 Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11001 Malicious code in scan-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ef4d9984cb1556d85ee7a49552a644920b953dfe2a86a1b22d190cdfce82a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11015 Malicious code in updasolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5019b6bb5f610407cab79430a7c13fe5f715daf02b6629d8945a69755c0fea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10960 Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10962 Malicious code in eds-charts-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2510990d3cbd74d80350268baeb27e8b73568fb0e64f3c83fd061ad4eda6f565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10940 Malicious code in nodmialer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f517fd7c243bbf2ebdbc660388ec85202c4ea31c094bc01cbb8b5ff4c0c7388f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2024-152 aiocpa 0.1.13 contains credential harvesting code

aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI...

MAL-2024-10930 Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...

CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...

Fedora 41 : opendmarc (2024-513cf04db3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-513cf04db3 advisory. - Fix for CVE-2024-25768 - Closes rhbz2266175 rhbz2266174 - Convert to %autorelease and %autochangelog - Simplify spec - Remove checks on if systemd is prese...

kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver in the w83791d module where the driver performs a read operation, which can result in a NULL pointer dereference. This occurs due to an unnecessary field lm75 that is no longer needed after updates to device handling functions, the driv...

kernel: blk-mq: fix tags leak when shrink nr_hw_queues

A memory leak flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When the number of hardware queues is reduced via the submitqueues parameter, the tags associated with the removed queues are not freed, causing a memory leak. This occurs because shrinking nrhwqueues does not...

kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in freeirq From commit a304e1b82808 "PATCH Debug shared irqs", there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For th...

tracing/timerlat: Drop interface_lock in stop_kthread()

...

MAL-2024-10507 Malicious code in ethens-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587aaeff09cedb01639d066a033a97d01f1137b14788e741c56f5801b6f38b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...