MAL-2022-3189 Malicious code in free-robux-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3101a743a664c12689dcdd4fcb6b87a03ad3039cb2a5bcf3753fce3bb529c72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in free-robux-apps-freerobuxgenertor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in free-robux-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3101a743a664c12689dcdd4fcb6b87a03ad3039cb2a5bcf3753fce3bb529c72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in free-robux-apps

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @epc-apps/edge-lambdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac603a15d0ab913153cc8c0364ba23ad7ed7b353172ee00e0876c3fecdbfee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @epc-apps/edge-lambdas

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1071 Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in apps-showcase

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Microsoft Office Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Office Web Apps Server Code Execution

The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-32151

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority CA certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries...

CVE-2022-20193

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for...

CVE-2022-20138

In ACTIONMANAGEDPROFILEPROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGEDPROFILEPROVISIONED intent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2022-20124

In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20124

In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2022-14366 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a permissions bypass in the deletePackageX function of DeletePackageHelper.java, allowing a Guest user to reset pre-loaded applications for other users. This...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Malware in @tide-web-apps/global-environments

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @tide-web-apps/global-environments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e076dfaaa81e703e22d7768acdea28c2ebed115cd9ef3030d468509d8104de4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...