MAL-2023-8498 Malicious code in vtec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d7ee41c6519fe49b5596a23455f56a28942d29e9e12089e804460a6e5bd522b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8484 Malicious code in api_vinted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e1ba9bbb303d41b2be5ebc420aa6800f1dda98e41f8a88147272f70289da802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The following message and call trace was seen with debug kernels: DMA-API: qla2xxx 0000:41:00.0: device driver failed to check map error device address=0x00000002a3ff38d8...

CVE-2023-42846

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...

CLSA-2023-1697464688 curl: Fix of CVE-2023-38546

CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificates...

CLSA-2023-1697464394 curl: Fix of CVE-2023-38546

CVE-2023-38546: cookie: remove unnecessary struct fields - Rebuild expired test certificates...

MAL-2023-8342 Malicious code in onno-missing-2023-full-movies-at-home-streamnig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f74f65cd28f1a691661130f5fd88a71bbf299125018d4be7085f77e8138ffe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Send Fake Rocket Alerts to Israelis via Hacked Red Alert App

By Waqas The Red Alert App is available on iOS; however, its Android version has been removed for unknown reasons This is a post from HackRead.com Read the original post: Hackers Send Fake Rocket Alerts to Israelis via Hacked Red Alert App...

MAL-2023-8298 Malicious code in shopify-currency-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce5f47f0fb8050c5ba0e74637e692ba095f4628070a3087b67db81de6deca0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2023-5198

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

CVE-2023-5198 Incorrect Authorization in GitLab

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

PT-2023-31905 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 16.2.7 GitLab versions 16.3 through 16.3.5 GitLab versions 16.4 through 16.4.1 Description: An issue has been discovered in GitLab where a removed project member could write to protected branches using deploy keys...

CVE-2023-43764

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43762. Reason: This candidate is a duplicate of CVE-2023-43762. Notes: All CVE users should reference CVE-2023-43762 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2023-8211 Malicious code in @zettle-bo/staff-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6890c2d23d73e43eaf40b3d6435083b993f77894876b67b4a2ea41c9a223f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8178 Malicious code in fca-jordan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db5b69d0619a83137f953387a4c7da45c2b8cb1406cbdbc8dfdba20427b81cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8135 Malicious code in fca_kaizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58495d710c97f1a072f8b1a7715f33d3a6c8db188dbcfe8438f47ec1e2e282b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8127 Malicious code in eteres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f3da402b965cfedd565147e0db9b2f7d55656136aca4019d62ca23c6e30c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Jetty vulnerable to errant command quoting in CGI Servlet

If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the...

MAL-2023-8077 Malicious code in testingsomethingforscanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e5bbe99e4a45912a53290196855f57c53acbcf9269d37821d13cdb6319220dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7982 Malicious code in emon-testt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3e1ddd0c9bd0c6e361f9383435fa90d24ddfb9642622862818d1aecfe88d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...