Malicious code in language-matlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3bff0146045d9130d2bb2523e15b9f1e582a33f6ba1e2a33524ffe5bb05732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tcms-malicious-package-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbe4f00487fb7bbadba6c2153a5c851ce1c61ce032ba09f3d69c53b49bd0f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dre-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29592555095a1b8521f2ae36968975aec4436b3690547f7cf9348e330312957d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7088-3: Linux kernel vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Several security issues were discovered in the Linux kernel. An attacker could...

Malicious code in chat-history-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede6c0203c0d5dfabc8b0ffe97bd7018474fd422452219e3554818ea925ffe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-method-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29577c8ffc63866c4637065e68045167ad7f9d535d70f9d3cef45eaea4a00ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-7088-3)

"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7088-3 advisory. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could u...

CVE-2024-47461 Authenticated Arbitrary Remote Command Execution (RCE) in Instant AOS-8 and AOS-10

An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to...

Malicious code in emtoolsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7321939016853a0b9d475c175446320711a796542c1bad74fc3efe93fc4a956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in team-plain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebdcd56391e0a8cbe5d18bdf75f39c55c250567bf3c9bad328ded8ecac2360a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteerrequestinterceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e8c643ef7ddf9688688411490355eea8c86e9aaff4cc8f55329bb05057ee36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-extra-plugin-adblokcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50389c28817c90850d22eeb10abc234f6b3cd67eb0c8677c347551931d46144c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daun124wdsa8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4f8181241d0605faadd7a9698324defcd845577c94f3553a344c8d1b9888b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zalfausi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 571a0d3333a3866f7d0193b3f89ac76d20271e46b69952c5dacd8f21b463c7f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bpftrace: unprivileged users can force loading of compromised linux headers

A flaw was found in BPFtrace. This issue occurs when extracting kernel headers, it tries to load them from a temporary directory. This issue could allow an attacker to force bpftrace to load compromised Linux headers by placing malicious headers in the temporary directory, leading to potential...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-2)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-2 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

Malicious code in puppeteer-html2pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 324b6f4d6c08f662554d6714a4806dfcf894570a51344933cfefdb55250b778c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteercaptur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a44baf6b29ddd1e31c9b8eef22a81cc8b888d98595a248c0f2b444bb517ebb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-req-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...