MAL-2022-627 Malicious code in @tekion/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25635e252b9808c78842badaf5878dca711e8678777c82f2327a3561c58a7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4870 Malicious code in noblox.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332a81ed84651ca22b9a949cc938519334d55fc1b9a8fce6a5b123de2098ef96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2500 Malicious code in discord.js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41ff73fb3183f69a72984a800fd1acb09d2a242b539d96f17ef1b398885cf1c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2012 Malicious code in colors-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36ae9b59011439265f622f08d6873bd4dfa0eb2c1da65f0ab540d273346d1f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1388 Malicious code in azure-template-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10d6fbf59581245f9918f3edb36dbc7879dee46d5b4d15555e411f29da0cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bb9f7982e1b5b7a8cf2ecd8a6a62a8b372d80d1e0d2cddfdd9f99038c29befb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1261 Malicious code in azure-arm-mobilenetwork-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1835cdc00e29dec5a3b51f5da1d340fc8cacc3e53602f970c4a02881ba125a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1237 Malicious code in azure-arm-containerregistry-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bc278f7453c5e3fcd0ef73ed4014c2d04941b6b4ac6e7d304280f2c9dee23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-servicemap-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879b0fdb17c1119e579e5f7d71290575b29a45995616e170b1d21d8d316d5b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in...

CVE-2022-24077

CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...

Electron 安全漏洞

Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron version...

PT-2022-16455

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer Beta affected versions not specified Description The issue allows an attacker to execute arbitrary code with System privilege via malicious DLL injection. This can potentially lead to significant system compromise...

CVE-2022-24077: Improper Privilege Management

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

PT-2022-20469

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2.8.4 on the stable branch Discourse versions prior to 2.9.0beta5 on the beta and tests-passed branches Description The issue affects Discourse, an open source platform for community discussion. Inviting users on...

CVE-2022-29232 Exposure of messages in BigBlueButton public chats

BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a...