PT-2024-29286 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan Gateway

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateway affected versions not specified Description: A vulnerability exists in the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateway, allowing remote authenticated users to r...

PT-2024-19429 · Unknown · Edgeconnect Sd-Wan Orchestrator

Name of the Vulnerable Software and Affected Versions: EdgeConnect SD-WAN Orchestrator affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful...

Malicious code in roblox-ts-core (npm)

This package contains a malicious postinstall script which downloads further payloads and delivers QuasarRAT. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e846a11945248574678fe65e4f8cd5b4a766ff129c761b615aef0f0c595fa5 Any computer that has this package installe...

Malicious code in sap-abort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e2bde6bdff35f1e9b3c13cc8e0202b7b2b76d1390e81fc3ea3d484340f5f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sap-accesslevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9eef95084b4052715fcbefc82b3ebb9680371d43f189ca1d39bb75af3c2a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-21141

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

Malicious code in toolbox-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfbot.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb151c00154198176313030563b649e051266589b603c6f66325730afa5d5d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zonduutest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd104d918d42d9fb61de1d1e24a2c632f2bf39f504ee6c16322e55ca3c977b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmp-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb46d1d23ab47e71a3d4b40022a8e93d5c2d099e133d1c45bf7563d370a6773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39521

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

CVE-2024-39524

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

CVE-2024-39521 Junos OS Evolved: CLI parameter processing issue allows privilege escalation

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

Malicious code in komcax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c911bd41972a2fa3147e74bc8e6a7905d586c2f095b8190453f09f9250c613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootrun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe0b4ba6593b11b85748383f8075db213c342a34223f8a3fda3f166008e5eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xxxtesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d38175f6a654132e1c7224f649de92984aa619a34361a3f36efe42eda4aed34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fontawesome-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff495c6fc65ef7548f0b56a04f0efd1d0c2877ee7b200e306156166e1263f644 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idtrack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0fc8370fda839703f80639e1113d2a48a932ffa24ce3557323690f41d630b25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylishteks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a8ed6d750df7841026d152bf8840677964a636c2377940003db377ae525481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...