MAL-2024-515 Malicious code in wlwz-2312-3803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a553f09c3a8b2bd4c55f1f95ad0c6633854ebcda41552162699a8bf2f714ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-589 Malicious code in wlwz-2312-4605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8286c8471b479f0fa80efe007115219ae6aea7fd6be240f3d629aa97306143ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-369 Malicious code in wlwz-2312-2201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d404281dae5127ea282a40c3b360c10be0d12d6c5b4ce2413dc3fe654be3ea72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-365 Malicious code in wlwz-2312-2106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d8f0fd12caddfde7061c2a18a76e9c1120f04f696a7813cbf09dfccaf25432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-528 Malicious code in wlwz-2312-3907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 056c724b78daaf5a26109729864395a205dc27dedfc3b2ef5c10788eadd70701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-296 Malicious code in wlwz-2312-1400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25467d90d98e89ea4bae91203eef4b062209423919e0015c11cd88fd544ed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-696 Malicious code in wlwz-2312-5804 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ed559ac041cf6032b45a7f3dab42fa61d7a118cc28a89a125a5359fac3ed99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-520 Malicious code in wlwz-2312-3808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 803fde2c3a643704d2dea0d6332c867c4e254aaef1ff8807f785435bd52bce12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

Summary Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to https://nvd.nist.gov/vuln/detail/CVE-2023-34092 -- with surface area reduced to host...

UBUNTU-CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...

MAL-2024-77 Malicious code in nylas-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55a9a93c44b5c1883d56e29e04686d00c22261be8470feb04163ac33f285c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-26886 · Epmm · Epmm

Name of the Vulnerable Software and Affected Versions: EPMM versions 11.8 through 11.10 Description: A security issue allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well ...

MAL-2023-8433 Malicious code in stripe-terminal-react-native-dev-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148f318d6453b35d5563824a26fe185c3df7e96f1a4f12089adbbb556e867459 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-MQ6F-5XH5-HGCF Harbor timing attack risk

In the Harbor jobservice container, the comparison of secrets in the authenticator type is prone to timing attacks. The vulnerability occurs due to the following code: https://github.com/goharbor/harbor/blob/aaea068cceb4063ab89313d9785f2b40f35b0d63/src/jobservice/api/authenticator.goL69-L69 To...

MAL-2023-8320 Malicious code in myaig-broker-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fd67b15eabdced87c5fbe689d7e0c286991ac7bb879f2f2135f5f2538a4e549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8170 Malicious code in beta-fhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8075 Malicious code in portal-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768a95f370e1b55036ea06a3987092eb217f0a763c28953fcf3bb8c11fb0c580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-rpc-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e90705834b05e292cabf72529d908456c4f3768af2b34604147b5ac6ec38363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1039 Malicious code in storyblok-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1012 Malicious code in ebtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb50b8a351189eb3838b9913ca61e1c0b0c4269a04f5babe163cbe876380f77f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...