CVE-2024-36416

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36416 SuiteCRM v4 API Excessive log data DOS

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-26983 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.14.4 SuiteCRM versions prior to 8.6.1 Description: The issue is related to a deprecated v4 API example with no log rotation, which allows denial of service by logging excessive data. This can lead to denial of...

SUSE CVE-2024-37150

An issue in .npmrc support in Deno 1.44.0 was discovered where Deno would send .npmrc credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private...

CVE-2024-37150

An issue in .npmrc support in Deno 1.44.0 was discovered where Deno would send .npmrc credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private...

CVE-2024-37150 Private npm registry support used scope auth token for downloading tarballs

An issue in .npmrc support in Deno 1.44.0 was discovered where Deno would send .npmrc credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private...

CVE-2024-37150 Private npm registry support used scope auth token for downloading tarballs

An issue in .npmrc support in Deno 1.44.0 was discovered where Deno would send .npmrc credentials for the scope to the tarball URL when the registry provided URLs for a tarball on a different domain. All users relying on .npmrc are potentially affected by this vulnerability if their private...

MAL-2024-1538 Malicious code in com.unity.cloud.gltfast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e350e8cdd404b4b5f53387437ed02152319a19e625bd4ce4c7c178848bd72e60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-lib-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b09a9d57bb929d0c7ba93b90c01ea2a5270838a233ae120bdade2730d5c6e364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1526 Malicious code in testone-avisheknayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33c763adc716c4d591a2d661f71d6e12a4d2dad52c8bbc88a16da7d7948274ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1522 Malicious code in random-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02969e3f79ab835099da7fc1ca720e01142e1d7c098b4021ddb45930af85f11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1528 Malicious code in winextracter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec386ca312f4527fe9f4260bf50d54dbc2abd05df6fd2784420e95e52cff8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1517 Malicious code in npmnewtest-avisheknayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a213b3a456d19c844ad0ae964625d99a31c44416ca6a1fcb3d2152d204f0900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1521 Malicious code in pkg-lumina-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7ac6d227bb951e00656b9768230c146f3be307af9f71cb484a398b72132ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-integrity1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aecacebeaf253088760161715d22f5ff77c66ecae6b73d9d1a9b984bbf8de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1512 Malicious code in developer-integrity-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5cb52fb483ad0e308286bf5982001d04d48d1f0a2f9e6f5123dbe6933680fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demotestsample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81deaf8942b0c1f252d8e518570899524ba93df16ac9a9d325cb4a0dbafcf4f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1507 Malicious code in dematestsample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fa4c0092d2fc8675c490b33d703becf8a79965b1d0623cea62a0581dc4015e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1509 Malicious code in demo-sridharrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb00b5e54c8124895fe68a8d2b6a91b8223d48c18540a1303bb4c21c0369c9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...