Malicious code in flow-multisig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f805322cd47cf2193208d8b266a34b3960d291fa94c74ad6769dedfa9658eb64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-9226 · 2N · 2N Access Commander

Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...

Malicious code in eslint-config-b2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9498fe4fe7d76f71e291bf28290e9ed7f2e2d6aa1d0572ef9544e2a51eb87ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in princedecmtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4296eec1561c67a70a133ca49c6fd90770377927551f2da264742ef8d3cf3a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bamoe-standalone-dmn-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c3fc2574b1213e8be16df20d0fb4a2864fc9c911ce6f2be5cba0d0580c2f516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Backdoor.Win32.CCInvader.10 MVID-2024-0694 Authentication Bypass

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/cb86af8daa35f6977c80814ec6e40d63.txt Contact: [email protected] Media: x.com/malvuln Threat: Backdoor.Win32.CCInvader.10 Vulnerability: Authentication Bypass Description: The malware runs a...

USN-7003-1: Linux kernel vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service system crash. CVE-2024-40902 Several security issues were discovered in the Linux kernel. An attacker could...

Malicious code in bcrypts-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 119f108e696a505c0b232d8ee8e4919de05b9f92725dcc535747aea9290433ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sketch-crowdin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760414998be33a4144fb0eee0455cc462dea5f95e07189b1ff637271a0014974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptograph-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344b01183d31f7bfbadedba12b2bfe4e733ea76938ea8976787f6c400b39f5a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roblox-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4766dbf57e00dc5b3ef46f29e17392167d207c46ccf1a6ea97fc9bcf674cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6284

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is a remote code execution flaw in Microsoft SharePoint Server. The root cause is a weakness in the deserialization mechanism. Successful exploitation allows a...

Malicious code in gapuler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 135c461ca2038be20078852f46a2075decc45661e4f9493e152620b5e6479ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38642

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 a...

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

A new security flaw has been addressed in the Apache OFBiz open-source enterprise resource planning ERP system that, if successfully exploited, could lead to unauthenticated remote code execution on Linux and Windows. The high-severity vulnerability, tracked as CVE-2024-45195 CVSS score: 7.5,...

Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk

Description : The SolarWinds Web Help Desk WHD software is...

Malicious code in com.meta.xrpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368c4215055d53b01fa4f0e947a03d5f6b2cdd01a2a9be147dd9c074e53b6208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cui-i18n-coke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d912c30c0e2cc9b0fa735da2459d298a8d3c2d49355bf85a7c8deb6532ece228 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

Malicious code in walletv5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff4fcd790dbc7787f055e2be040f8484d848c82fd64688f5b2aa4edf6e2b932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...