Malicious code in wlwz-2312-2605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31465f19156790893cf968f2c2b1eb98e729791855c6636411175a07dd5276bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a00f55e04251a68db55fe00d96067343bddd4d39db80871a1fd8a2b485b308e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf7fa5b62edc20d99aea700624d4e3fd221b91c97246555c934692fac30bc25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6403 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3dbcf44dbfc9707df017f54aa7632fdd5e1815a399c9be2b74201dd48125c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed51411d319b368c4ab5660fb0966b9d24dc30e2b8da1a64799fd843e6231ee6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2311-4202 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edb2ef58709bbb10b0e4b8a8f60ef3590e147d4825a37b8c4ac1605fa215cec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

CVE-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

Malicious code in discord.js-sound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f77123d69642b2c93c33601cb76ca45905f45e0a6e25e03f1fb7fdc6caf2462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59696ac0bad22dd9cbcfd3def050afd1566cc7ceb5cae53659eebeca0d368f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lunar-sb.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387a2f7e6dc2c3022b63ec2ea875bfdbcc6ee0fd07b1ff68475859ea718566d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shenmue.js-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d9db50cc4a7c28d282ae223537655ee93effd5621fb6d7bcba7cbcbcaa1f846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-49329

Anomali Match (CVE-2023-49329) before 4.6.2 is vulnerable to OS Command Injection due to improper handling of untrusted input. An authenticated admin user can inject and execute operating system commands, potentially compromising the underlying OS. The earliest affected version is 4.3; fixed in 4...

CVE-2023-49329

Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating system commands. This arises from improper handling of untrusted input, enabling an attacker to elevate privileges, execute system commands, and potentially compromise the underlyi...

Gambio Online Webshop unauthenticated PHP Deserialization Vulnerability

A Remote Code Execution vulnerability in Gambio online webshop version 4.9.2.0 and lower allows remote attackers to run arbitrary commands via unauthenticated HTTP POST request. The identified vulnerability within Gambio pertains to an insecure deserialization flaw, which ultimately allows an...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2023-45235

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...