CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

WordPress WP Activity Log plugin <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin WP Activity Log versions = 5.2.1...

MAL-2024-10767 Malicious code in people-rn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681ed628388433ac94a7fae9dc863ce558f90b455be767d11efd4b5f0ad7bd97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opa-fe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10760 Malicious code in mkt-worker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8971f053ecded5e4c81fa201da46f7838e79cf6635808be72fa828ae029a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10759 Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10757 Malicious code in markservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967b4b4c0264a9fff8d309834b2a12350b0db8f50f86f487903ce1556d628d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10756 Malicious code in markomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77eccdef0d97ddaef12d7b6d994f078943e26b68cb1dbf79615d0a18035b96ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10755 Malicious code in marketing-jest-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6ca86b3958ca21a43d81429cfad45bf1ded2515bc8fafc3307885ed2f6b869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10752 Malicious code in magic-umi-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4f026691827b0fc765f9ef1d86d699d1044f815fbe81787619c55de35ba765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP Activity Log Plugin <= 5.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Activity Log Type Plugin Vulnerable versions = 5.2.1 Fixed in 5.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10793 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID ad9533377437 Credits mikemyers Required...

MAL-2024-10673 Malicious code in lightweight-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ffe60e0945106204ad59c780f309329d5965654dd8e82c8da2a847c93e08fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10670 Malicious code in hubot-hangouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10667 Malicious code in grpclb-zk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522d534a3344ad4af3e68233a9a85c47c721dbd0fc98ecac17ec10ae1216311b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10652 Malicious code in @ps-i18/i18-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 262dc184a4159c2a1a26d9f3316074336c0ab00d4fae7ce82864cb736106ecb2 The OpenSSF Package Analysis project identified '@ps-i18/i18-utils' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10666 Malicious code in export-pruner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e2f312ed9fbfa3af3855f0f17ba52946628c78e0176ec0f9c5a7ed8f2ce8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10630 Malicious code in sixsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb77c89a27aff142eb4dd167744ea5784b414741b03b0c7dd1b4eb5a3614c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sixsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb77c89a27aff142eb4dd167744ea5784b414741b03b0c7dd1b4eb5a3614c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...