MAL-2024-843 Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-648 Malicious code in wlwz-2312-5301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86163aecf0ef7f4d9e376d7d04d9874fe1b30306d89b5a85b05c75740fb24a7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-366 Malicious code in wlwz-2312-2107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4e0473238cfdc7e52ebe6ae11e6dc9575d8ca45278ee0fcea1fd6d19420a783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-39337

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious...

CVE-2023-4154

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users possessing the GETCHANGES right to access all attributes, including sensitive...

MAL-2023-8143 Malicious code in loudashe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba8f958ae41360f9d21ab5a0439264925f37d9bc3d0acda1f0583924c05b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-30853 Gradle Build Action data written to GitHub Actions Cache may expose secrets

Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. A vulnerability impacts GitHub workflows using the Gradle Build Action prior to version 2.4.2 that have executed the Gradle Build Tool with the configuration cache enabled, potentially exposing secrets...

MAL-2023-492 Malicious code in hardhat-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ecd6650e933188001d304f60e4bdc5a7820065595396fe796ba8d86eb3bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2009-4303

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores 1 password hashes and 2 unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information...

MAL-2023-230 Malicious code in dca-http-searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa09b188b8888ce9d5f3a95948d3823bba2d541295c1b21b49ee876d50d0058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-83 Malicious code in agent-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd87cf4d9e1e62b56ac8a65012bd4d49c2653e205f6eea7ef15b67deb469100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4076 Malicious code in jsouile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43eb5662da53a65cb4503ac7500bea7f425f99c84289da3c4b54e7273811af80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2533 Malicious code in disney.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6ac0ffa4aaec2dcefa2b90b7b2351de64a63eab582d3aba0e437fd5ef8dd7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6667 Malicious code in tslint-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b487c30209288915a78a54104205552e07c0667d4111beb89f0b27dcbb3e90af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-930 Malicious code in alfaform-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b774927a44e0387b65b7440c9ed8179b099a96cc5dc65b2cd515347298ca7fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3592 Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2345 Malicious code in datadog-app-example-random-dog-dog-image-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b50dcc4d3984665cd138c5e4d7a07df4b4516229793751b28f80309508902d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3968 Malicious code in isomorphic-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77d4d391965bb7a4c11a66a561e0658812b791204239bf258a2d48675c730c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2021-125

A flaw was found in Ansible where the secret information present in asyncfiles are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower...

DEBIAN-CVE-2020-1740

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and t...