Malicious code in tcms-malicious-package-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbe4f00487fb7bbadba6c2153a5c851ce1c61ce032ba09f3d69c53b49bd0f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10920

CVE-2024-10920 affects travels-java-api (versions up to 5.0.1). The vulnerability exists in the JwtAuthenticationTokenFilter.doFilterInternal function of the JWT Secret Handler component, where a hard-coded cryptographic key is used. This enables remote exploitation with high attack complexity an...

CVE-2024-10920 mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the...

CVE-2024-10920 mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the...

Malicious code in dre-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29592555095a1b8521f2ae36968975aec4436b3690547f7cf9348e330312957d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6861 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API...

CVE-2024-6861 Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API...

Malicious code in cs-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e21f9be454ca4c14a1b7aaeae9fa0f577a1b615be2af2ac44db9cf09df079f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-analysis-ts-for-sellercenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74562e2ce31e022d691644a9e71592ee149d99d6988a02f47bd35197d549c1f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecd743511e25a28d813fdd6d85c3fcb14c688389759c53016792d6c536b99a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gnache-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb71996ea970cd158615c28425049fe75cde7631e0e94d80887b9df113ab876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-16642 · Unknown · Travels-Java-Api

Name of the Vulnerable Software and Affected Versions: travels-java-api versions up to 5.0.1 Description: A vulnerability was found in the travels-java-api, classified as problematic. The issue affects the function doFilterInternal of the file...

travels-java-api 安全漏洞

travels-java-api is an API for travel management from the individual developer Mariana Azevedo. A security vulnerability exists in travels-java-api version 5.0.1 and earlier, which stems from the use of hard-coded encryption keys in the doFilterInternal function in the JWT Secret Handler componen...

Malicious code in pupeteer-page-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48f298dc5513eeed1bff5306aec7464ff288aa53735b67dbfb817775f2be6679 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

jenkins: Exposure of multi-line secrets through error messages

A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...

jenkins: Exposure of multi-line secrets through error messages

A flaw was found in Jenkins. Certain versions do not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...

MAL-2024-10334 Malicious code in pupeteeerproxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b899c3f245eb5c7079ae838714250cbdc6d7d2c1a29f2daacb50f815a2f2a04e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteerpluginstealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a636c907637d75c99aadbb0e09e1e5e675cb6322277962a5d3b2a75622e0d3e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appdynamics-libagent-napi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3ccb8490c24108245e9e5e4893518e881e48f0dafa4b0ad152ab458de4e7b1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e685150357e5118f6b99d29dcc954b4c5e33389fc7764e15ac72be42fbc1e27a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...