415 matches found
MAL-2023-8376 Malicious code in @momo-miniapp/api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6007d4e44cc4c068a9bb068cda01c272f184a9023da891b3f63737a50f814575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8104 Malicious code in fca-dongsexx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54ae0b20028a7237a5d5284fa6a3fbae917dbe46cee4724c495d3e413eb0279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
Minio Environment Variables Exploit CVE-2023-28432 Overv...
CVE-2023-23772
Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...
MAL-2023-1532 Malicious code in usaa-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hh-dep-monitoring (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac7b27f86bac41db082963b72360f1c159fa5ecbaf4a72d766ae92548df697f3 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
Blacklist3r - Accumulate Secret Keys / Secret Materials Related To Various Web Frameworks
The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage of these...
MAL-2023-973 Malicious code in xml-fast-decoder (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f72595dbe55afb8789d70686d9dfc77d102733a2090e76b1063b8a75dedd697 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-46 Malicious code in @nokia-csf-uxr/csfwidgets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39bbff0400a8d8025c9c214e1a4412729bd69e23c231e3307d61d05b54f8eb72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-533 Malicious code in jannah-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2e022fa0d4963c4945c12a0fb8f17cf529cb3c9ce770ecfc85481cd3508e98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-561 Malicious code in kvs_availability_tool_registration_code_crack_work_zj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc7a5cc09fe5fe0b8ab8a1d0956c0e8a7aad8a2ab6b582905796a1c333d67dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-29480
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
DEBIAN-CVE-2023-29480
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
Design/Logic Flaw
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
UBUNTU-CVE-2023-29480
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
CVE-2023-29480
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
CVE-2023-29480
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use...
CVE-2023-29480
CVE-2023-29480 concerns Ribose RNP before version 0.16.3, where secret keys can remain unlocked after use. Public docs confirm the flaw affects the RNP tool and is mitigated by upgrading to 0.16.3 or newer (e.g., Fedora/OpenSUSE/Debian advisories reference 0.16.3 as the fix). The nominal impact i...
