CVE-2024-47555

creationtimestamp| type| source ---|---|--- 2024-10-07 20:58:59+00:00| seen| https://t.me/cvedetector/7257...

MAL-2024-9102 Malicious code in protobufj-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ed062cce3f1c6c84bfdb6183ed9db3baafed65d7695929d1747b34a9dcdbba8 The OpenSSF Package Analysis project identified 'protobufj-cli' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-46310

creationtimestamp| type| source ---|---|--- 2024-10-07 04:26:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8693 2024-10-07 13:11:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8697 2025-01-13 19:14:31+00:00| seen|...

PT-2024-26083 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Oct-2024 Release 1 in select Android 12 and 13 Android versions prior to SMR Sep-2024 Release 1 in select Android 14 Description: The issue is related to improper access control in the ActivityManager, allowing...

MAL-2024-9100 Malicious code in o-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc143165633782b48a2d1e1f1d68c10256845041b7b67b0b8c8410107e1ed3f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9096 Malicious code in app-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d98b7aa0eb79bf02f2a4aacf2f8a02611ac609640346bb46294561925dbf0c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9094 Malicious code in bolteu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bd2a7cf68d796d1274d10ce0e343341543e85f964224249a958802918b2482b The OpenSSF Package Analysis project identified 'bolteu' @ 8.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-9091 Malicious code in vue-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af79d6208188b1a6f878e404ecc5d2609b1bbd40511af1c30e8f6124d5431de7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9087 Malicious code in @linx-ui/pharmacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9086 Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9079 Malicious code in interactive-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca3bcc821732a02b79cfd930582365b504c50377f31d23b6f2320ebb784914a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9078 Malicious code in aou-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d557b38b0c01886a47e3e3a39e8f10cb4b839ba9541d49e129c75ad18755ae The OpenSSF Package Analysis project identified 'aou-ui' @ 0.0.3 npm as malicious. It is considered malicious because: - The package communicate...

PT-2024-7398 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to...

MAL-2024-9073 Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9071 Malicious code in com.lootlocker.lootlockersdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eadafa20871062037f566c91f49770323a50ffaff90581cdab78bdf6cb0b86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9069 Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9068 Malicious code in verida-tech-demos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9af82932dfcd9a6021dbd383ebadc322bdfc63b8c68d1981537b14ab226b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...