PT-2024-15991

Name of the Vulnerable Software and Affected Versions PAM affected versions not specified Description A vulnerability was found in PAM, where secret information is stored in memory. An attacker can trigger the victim program to execute by sending characters to its standard input stdin, allowing...

Privilege Escalation

github.com/juju/juju is vulnerable to a privilege escalation. The vulnerability is due to the use of a predictable JUJUCONTEXTID as an authentication secret, allows an unprivileged user in the same network namespace to guess the ID and connect to the abstract domain socket...

MAL-2024-9395 Malicious code in w3jp6x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d73fff393799245c490e4d428b124f043cffc6ee705362ab6c903d2a09e9c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agl9v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78e20d511a34d24103b62f848d649aa633dd8a711dfa83942fd04b045ee216aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 5pjh9i (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b146f124ef7685c191891b06d1253b04cb7df55faa519897a63f8156a8070f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9307 Malicious code in 2mul1k (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da2250b764463375588d49e82f6a7bc6ca0d1831d20fb9daacf172ecb998d267 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9343 Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2797f58177b66d9be1500b40bd7b910b50660e07b0b4b73780746fcfcf57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9391 Malicious code in new-al-bum-av-ailable-broken-social-scene-8of7p-zaeaqb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e94760d3cb3464dbe91a2031024727c5db879a30630ddbba4deb39e7482ee97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9381 Malicious code in mp3-do-wnload-file-to-day-5794-street-hassle-pf8jn-wucrqe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5537f6c773804ab8c3d8b516b7f60c16b9b59aa3d4819fbdc5286b416ed6433a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9379 Malicious code in mp3-do-wnload-file-to-day-46223-waltz-of-a-ghetto-fly-i2glp-eayvqc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4db2ebb472113c9c8aed106f041fd82795a07008b23b13101e954888ffffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9387 Malicious code in new-al-bum-av-ailable-2014-15374-tourniquets-hacksaws-and-graves-53p3g-eabxqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55ad95ce8db20fb7a4867c68d83feef1239cd52cd8a74058f49cb9c9d443daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9378 Malicious code in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b123d08fd319f902d9638f0981c9302a2e7c8d43edf179c09571147eaa56bbd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9353 Malicious code in down-lo-ad-now-zip-mp3-18275-skelliconnection-taeie-mgpquk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 578abfb010f8a9f4c568a1b1c60ed36c604c73c95d630526fa210c8dfbc01253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-do-wnload-file-to-day-46223-waltz-of-a-ghetto-fly-i2glp-eayvqc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4db2ebb472113c9c8aed106f041fd82795a07008b23b13101e954888ffffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in securedrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6e71494cc9a9dcef7e0a491a7cf5c91eb09f8908655726169ff32e3a94a9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secret-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9831 Malicious code in secret-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qnap QTS Insufficient Entropy (CVE-2023-34973)

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and...

Qnap QTS Out-of-bounds Read (CVE-2022-27598)

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP QVR Pro appliances...