Malicious code in @azure-test2/test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2768ecb9a8286366492bf441b8138e8288dcaa230ad23edc23ae4d1da9769413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bottle 安全特征问题漏洞

Bottle is a simple and lightweight Python-based WSGI micro web framework from the Bottle community. Bottle suffers from a security signature issue vulnerability that stems from a processing error during early request binding. A remote attacker could exploit this vulnerability to compromise the...

Malicious code in react-dom-router-compatibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4efc1e3fc09e8efb01c5a4b15ee2c17ecab84adb02bd7641fdb76916584aee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-avidl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92c67e222159270b34173f0d8fdd80261b45d22a9baeb4f1744bb0366c55df41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wagtail-supertable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb42d345125f6f8f05ad098a1eb44eb803af7f0d56979b8c1bd28342a3396e49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isomorphic-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77d4d391965bb7a4c11a66a561e0658812b791204239bf258a2d48675c730c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ado-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd009dde2794c465f22294ea7b9405a3773dfef317eefe05126917bbbcdabbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apollo-federation-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5201e2567b87839a5bb3c1c2dd4c7c9b275c284349ff04a9c2b348451b979206 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vro-language-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 674b9e5c2006629ab31bca90331eb52fd95dfcbb998b11b281e433c3ed721dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-pan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81abbc1cbb8d6be5013b7086a11c782c254ced9bcdc0ba3b07c5de171ad68e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sushi-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10e8b1c7e3c00e61550ec5810cee8467f0f34498a2b31df82ab1734d1a5bd878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trezor-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ads-monsuperpackage-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 875351d8a06d0f106790f162df546a8712e88e2a03bea47139c1ac0507b19c1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-lastest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c78f4997e4b378d63d24061f7eba2438ea82aec52c6b7f1860c3c2de9beeaed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ceye-test-0001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e6c92b162c66b57e82aeff6cb8f48d5f03b4aa264ae009c99139ad5261e520e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uitk-react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba5221edafff2a7c2c4d02c4c2098b3e6f2962b29c9340f782dab5ac45e0e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gpsu/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82441bd6e09a70f9652399e745df409dbf2bbf07d483ecc2d1f343774ac43fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions 6.3 through 6.11 that stems from incorrect access control in the SSO ADFS functionality. A malicious user may be able to exploit this vulnerability to...

Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module

By launching the drbremotecodeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with...

Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module

By launching the drbremotecodeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with...