PT-2024-21800

Name of the Vulnerable Software and Affected Versions Docassemble versions 1.4.53 through 1.4.96 Description The issue allows attackers to gain unauthorized access to information on the system through URL manipulation. It is an unauthenticated path traversal flaw that exposes sensitive files and...

MAL-2024-928 Malicious code in discord.js-dmall-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd9c3a4166db72fb9307f7a0e8727926cdbf66166bab94d2031d450120a8f036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-935 Malicious code in iifl_serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fee2df05c15b754e46f9e40e85e67b0499b639943c4674ff0ac4cce7a91aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-873 Malicious code in wlwz-2312-7801 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf66057ed5652a0d2838dfdee19edebb9c1011169b2fb7cce34c906f919cc25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-289 Malicious code in wlwz-2312-1302 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570aad10d0978c1e540b674905c55d67e5d17e139a4f032ace5630e5a963f4bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-781 Malicious code in wlwz-2312-6708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48c095942c1a21b64d1c52edb7b4b7e7bc1e7f95ee7f2bb6fc30a34d38c93fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-677 Malicious code in wlwz-2312-5603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d3af2495fdeab060f4b09806273c71748ca627a7122a3d582005678e7a9ea14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-605 Malicious code in wlwz-2312-4803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4231fe274ae45d9af5917dfbc9074473a6403e2d7644929d7be48e5ac180f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-515 Malicious code in wlwz-2312-3803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a553f09c3a8b2bd4c55f1f95ad0c6633854ebcda41552162699a8bf2f714ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-589 Malicious code in wlwz-2312-4605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8286c8471b479f0fa80efe007115219ae6aea7fd6be240f3d629aa97306143ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-369 Malicious code in wlwz-2312-2201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d404281dae5127ea282a40c3b360c10be0d12d6c5b4ce2413dc3fe654be3ea72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-365 Malicious code in wlwz-2312-2106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d8f0fd12caddfde7061c2a18a76e9c1120f04f696a7813cbf09dfccaf25432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-528 Malicious code in wlwz-2312-3907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 056c724b78daaf5a26109729864395a205dc27dedfc3b2ef5c10788eadd70701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-696 Malicious code in wlwz-2312-5804 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ed559ac041cf6032b45a7f3dab42fa61d7a118cc28a89a125a5359fac3ed99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-296 Malicious code in wlwz-2312-1400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25467d90d98e89ea4bae91203eef4b062209423919e0015c11cd88fd544ed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-520 Malicious code in wlwz-2312-3808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 803fde2c3a643704d2dea0d6332c867c4e254aaef1ff8807f785435bd52bce12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

Summary Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to https://nvd.nist.gov/vuln/detail/CVE-2023-34092 -- with surface area reduced to host...

UBUNTU-CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

MAL-2024-77 Malicious code in nylas-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55a9a93c44b5c1883d56e29e04686d00c22261be8470feb04163ac33f285c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-26886 · Epmm · Epmm

Name of the Vulnerable Software and Affected Versions: EPMM versions 11.8 through 11.10 Description: A security issue allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well ...