Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7e81cbd6ad8ee7eb04588e6fec967a31ee4e9528bf73c5c1c3e5f53565645f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-vailable-al-bum-file-476579-blood-karaok-fs2b7-phmwby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903467a052324571eebe90d006e8f80620c8ae0f68876c88dbf62737c99a7613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ava-ilable-down-load-mp3-today-50529-lets-change-the-world-with-music-cx2zi-xhskuv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df195ac8737511909f9fe9908cbb3c0cc9287f38837903e901667ca3ac686141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-lbum-do-wnload-avai-lable-file-2016-44588-my-wild-west-fzmj0-gpjzue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d227e690fcb2c6fa40eb050274026415cc858c76009d5e255816dae180ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-al-bum-av-ailable-467736-headful-of-sugar-tu33k-ptkkpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e39aaf466d2e987198ad020f9910fe30e6403907bfa5f751559f8bdbb4817a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a7296fbdfdba291f43b1412910adb21a14eeeb9f4aa7f69bcee0466370011d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-6766-the-empyrean-bn3pu-tdpbau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bec20bf674a45f119e4fb003bb3ac0bce20575c1d225eb4816f20bc5e76549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7071-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; CVE-2024-45016...

RHEL 8 : kernel (RHSA-2024:8161)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8161 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: kvm: Avoid potential UAF in LP...

Qnap QTS Improper Authentication (CVE-2024-21899)

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

USN-7069-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - CPU frequency scaling framework; - HW tracing; - ISDN/mISDN subsystem; -...

PT-2024-9763

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23 Oracle GraalVM for JDK versions 17.0.12, 21.0.4, 23 Oracle GraalVM Enterprise Edition versions 20.3.15, 21.3.11 Description The issue is related to insufficient input...

CVE-2024-9137

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise...

CVE-2024-9137 Moxa Service Missing Authentication for Critical Function

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise...

CVE-2024-9137

CVE-2024-9137 describes a missing authentication check in the Moxa service that processes commands, enabling an attacker to trigger command execution and potentially download or upload configuration files, affecting devices using the Moxa service. The CVE is documented with high CVSS scores (4.0/...

MOXA Service 安全漏洞

MOXA Service is a hardware device infrastructure service from China MOXA MOXA. A security vulnerability exists in MOXA Service, which stems from a lack of authentication during command sending and could allow an attacker to execute specific commands, resulting in unauthorized configuration file...

USN-7020-4: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI drivers; - F2FS file system; - BPF subsystem; - IPv4 networking;...

Malicious code in cbdev2024test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4fe76ee823f88ab6484802e30511e9103d6953aabe83c7758dfd4197613fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duckc2-v5.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ecbf93765f81c2e3f477963e5e1fc81ea3569e73078a57a300ae10543d2a02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...