SUSE CVE-2024-50159

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix the double free in scmidebugfscommonsetup Clang static checkerscan-build throws below warning: | drivers/firmware/armscmi/driver.c:line 2915, column 2 | Attempt to free released memory. When...

MAL-2024-10500 Malicious code in eth-cmeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390d3f621f6795cefcac7ff48cd9734854f2734360b55599683db6ece8b468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50966

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addAdmin...

CVE-2024-50966

CVE-2024-50966 affects dingfanzu CMS v1.0 via the /admin/doAdminAction.php?act=addAdmin endpoint, where a CSRF flaw allows attacker-controlled creation of admin accounts, yielding unauthorized privileged access. Root cause: CSRF in admin-action handling. Impact: high confidentiality and integrity...

dingfanzu 安全漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version V1.0, which originates from the /admin/doAdminAction.php?act=addAdmin component that contains a cross-site request forgery vulnerability...

PT-2024-34476 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/doAdminAction.php?act=addAdmin component. This allows for attacker-controlled admin creation, resulting in unauthorized privileged...

MAL-2024-10521 Malicious code in puppeteerscroll-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef54ed97acfe5ef98e20301d2c06ccf2391055cb225e5c1cc48bc06950e82d6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10522 Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-50159

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix the double free in scmidebugfscommonsetup Clang static checkerscan-build throws below warning： | drivers/firmware/armscmi/driver.c:line 2915, column 2 | Attempt to free released memory. When...

MAL-2024-10514 Malicious code in myplaintext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84bc5ee93e728db876b0e1c3d63c48f14946591c97e1e924c10ca3d60037ffe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10530 Malicious code in web3-toekn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b34b72b8ff8d01e0d648851125a64aec37c620314f8895fea14db88514aac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10532 Malicious code in web3tokn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf19186126f7c85de9d64c25ec0b7d27ccb4878ecef2f9860efbe7614287773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 7 : CloudForms 4.7.7 (RHSA-2019:1833)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1833 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments...

MAL-2024-10441 Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10432 Malicious code in ganach-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d3e3f61f335dc7d34337825d521731cfa9030c28efb0b1dc3c13cba719d89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10436 Malicious code in puppeteerwweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb0748b32f74311c6685d9f83b7f96d02b87da7abe76eddbf2f3d787179eb97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10396 Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nuclei-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff11d1d83d49d09048c99bb1832b42e2e1c9b2eaab16b52b0da3868e73949051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45888

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setapmapconfig.'...

MAL-2024-10337 Malicious code in pupeteer-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84f1706624205e21ef071dc91821f8d234138504f1458d980864e2dbfb38b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...