Malicious code in solara-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c4278b58b290241d9ef295a9ceda4083285189698be34585555b85f49c7918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron_npm_deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fab50ae8be78e8043fb45e594ddc2011c78115201e0697bcdf80e50f785a40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkonmina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74c40ef671e2fb9d5956f1fd7f022e0dd1ca0f1da3602a687e9172cc4280fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qwilr-examples-create-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0bbec32dcccb555fb5667a8f1cb7f4973512ac8acbea5261a4ff7d14a952476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remix-kl-c646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a85da0593ba62361a1b877e3000ed361c7f4fee4943ba4472a9f97648f7236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48865

An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with local network access to compromise the security of the system. We have already fixed the vulnerability in the following...

Malicious code in openpass-sample-sites-client-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22761b2b3783be8fe56b0c5a6dcf9a5ad086a0be989ebb32123064f9800a7a1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openpass-sample-sites-piano-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f0304f3f60bf5d349bb9e70fe90a204d906a2213b87d66e41afe3b0c1ddc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11211 Malicious code in pantheon-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4da7ba157a9ffb95066f9d905650ba20227c83563a445aa30218a7eb1efa4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastify-tfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7464e6810a1e0786e6e5319c23b576286c8bff07c41fcb1ac9d1f47c67f5af40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stacks-blockchain-dist-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ff71a1fa8a796d254711f77c61001b106406614239e93a1b59405fc6c1a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42452

A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability...

CVE-2024-42452

CVE-2024-42452 affects Veeam Backup & Replication . A low-privileged user can start an agent remotely in server mode and obtain credentials, enabling SYSTEM-level privilege escalation and the ability to upload files to the server with elevated privileges. Root cause: remote calls bypass permissio...

Malicious code in dcapps-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dda6406c22ba94ba014724ba09ba61725dfcb8f77984fe08eb729add3d9e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @0xengine/xmlrpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8df33e10862a6cfd274bd8eae46b471dd53dbe1c3885b47a379b2f790898f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Acronis Cyber Protect/Backup Remote Code Execution Exploit

The Acronis Cyber Protect appliance, in its default configuration, allows the anonymous registration of new protect/backup agents on new endpoints. This API endpoint also generates bearer tokens which the agent then uses to authenticate to the appliance. As the management web console is running o...

PT-2024-29953 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating...

Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in h5bp-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f10e6ae365af97b4c79f04f1355dd26a8862632b8ce77cf50da4b2195414716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in demo-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73030295cfc2df37061e6ab74ae2c0b2cea34184879e24b484012a578a9ed576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...