Malicious code in elitebots-prevnames (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3421b5fe5476f1e1cae544e279bf1731be45c2e887956ef9dca25d2a96dfb9e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1670 Malicious code in elitebots-prevnames-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d02d432c34e4cd053181ee1c3bd8e84aab59e198dacbfcfb8c88f184188c5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-secrets-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5c6df792d0b8b82b33553dca5481d1448b9b1b386d33e1cb5baca398cd76f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lldb-dap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b30b65734b0a9961a35218b38d14cb5fc920ed076b3121fbab31e41262d4693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquery-dragster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cf37295e01427e88bc1fd351c41960813a4b4a58c78b1ccd843bb5a46414dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flipper-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813614a0417abbf8af3d06d8e798cc8a0174675c3e5f824401b04c85b3f9992c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kami-richtext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634fe3bee06c80f43ca27ad558c4834386dc1bb31779583c7911b679f550bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1664 Malicious code in @elza/keepalive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36898e173038cb4c2df4e969d539b9594821fc6f2c6b1c8750d717d5f637eea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1655 Malicious code in imageg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df52076c4f31a1cfa37f150398316cecaf3fa4608747f701714ca329d155e6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1653 Malicious code in desainnew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bf842f0425d57bc046f2dfe5ca780425c5c598cddf38891bcb48821a75920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1644 Malicious code in pwi-cfa-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d39aaa33ecd66d4aac0437e45aa6a1cddcc74bb7ed416f6b33c3a7151cbc035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38329

IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...

CVE-2024-38329

IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...

CVE-2024-38329

CVE-2024-38329 affects IBM Storage Protect for Virtual Environments: Data Protection for VMware, versions 8.1.0.0–8.1.22.0. The root cause is improper validation of user permissions, allowing a remote authenticated attacker to bypass restrictions and change settings, trigger or restore backups, a...

CVE-2024-38329 IBM Storage Protect for Virtual Environments: Data Protection for VMware security bypass

IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...

CVE-2024-38329 IBM Storage Protect for Virtual Environments: Data Protection for VMware security bypass

IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...

IBM Storage Protect 授权问题漏洞

IBM Storage Protect IBM Spectrum Protect is a backup software from International Business Machines IBM. Provides comprehensive data data disaster recovery capabilities for physical file servers, virtual environments, and various applications. An authorization issue vulnerability exists in IBM...

MAL-2024-1640 Malicious code in vivid_framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2010f8d2281230e81c4e7549be2af22ce8a41d11b5ae8d1920eb69b3aece581b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-27945 · Ibm · Ibm Storage Protect For Virtual Environments

Name of the Vulnerable Software and Affected Versions: IBM Storage Protect for Virtual Environments: Data Protection for VMware versions 8.1.0.0 through 8.1.22.0 Description: The issue is caused by improper validation of user permission, allowing a remote authenticated attacker to bypass security...

GHSA-Q6C7-56CQ-G2WM Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

Impact This issue is only relevant to clusters provisioned using RKE1 with secrets encryption configuration enabled. A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled please see the RKE documentation. When...