CVE-2024-22461

Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system...

CVE-2024-22461

Dell RecoverPoint for Virtual Machines 6.0.x contains an OS command injection vulnerability due to improper input validation. A low-privilege remote attacker could execute arbitrary commands as root, potentially compromising the entire system. Mitigation: apply Dell security update referenced as ...

Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fire-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20a799aa205261bebfc145bf0f806e35a1528927bea29a50efbc036a1c89327 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11827 Malicious code in font-style-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bef1c2c400e738e92dbbb7b357e9ba90c49529f4ffdf36ea10f56257008ba3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Invoice Ninja unauthenticated PHP Deserialization Vulnerability

Invoice Ninja is a free invoicing software for small businesses, based on the PHP framework Laravel. A Remote Code Execution vulnerability in Invoice Ninja = 5.8.22 which accepts a Laravel ciphered value which is unsafe unserialized, if an attacker has access to the APPKEY. As it allows remote co...

Malicious code in pacbot-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2527f33d46883eac958d98baa0937139f8988ddc5f7803d5764921761ddf4e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dextester123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26d87ee78544b18671f34fdbfc2bb566d83d78f917c88958141e6c335ba9242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in majidalfuttaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f62a0253b388a37cdf7f07ff7d02dac3e0bbed2516288af419cdcf7218c979b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11808 Malicious code in nayan-imgur-upload-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b98ebdb98b3110329cb9db3c496ef6fa0d0f21bcf8ec8302746d6f47b0cf884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-js-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6775b74cea176b7aaff3429e4e55a224d9f03da9865a07c99940ff7f0cf1162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shyftportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c420e2c055c4dac21abe5aa3deacde16aef6dcd57335d4244adffc4346365a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in goworker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc41b31c8374e8dfb0d1a61187a9224907fd3adc6b4988f7285c3ab45891a807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-7148-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7148-1 advisory. Lyu Tao discovered that the NFS implementation in the Linux kernel did not properly handle requests to open a directory on a regular file. A...

Malicious code in @wf-ceo/react-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jekyll-doxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc397fffef5e9f788df267304bc1d6a1889066148532360fd247d8852cc0050d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12148 Malicious code in jekyll-doxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc397fffef5e9f788df267304bc1d6a1889066148532360fd247d8852cc0050d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12158 Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.collections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261ab2743232ff1e6c05ececf67a115acadf196fe4994bda33c1da81b933ac67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in playwright-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60a2a7e0e26a3252aaec3534c214513245613c9850f72abbdefc21de170d304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...