Cross site scripting

Dell Unity, versions prior to 5.4, contains a cross-site scripting XSS vulnerability. An authenticated attacker could potentially exploit this vulnerability, leading users to download and execute malicious software crafted by this product's feature to compromise their systems...

CVE-2024-0169

Dell Unity, versions 5.3 and prior, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

Malicious code in wlwz-2312-6006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b494db2abbd4ec682b2dc2b7fec15ef84df60b1e89a0bfd730105769d73100a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6b0c891e0a48196a53cec18f1cce102281436e4acbf4a45af7444166378496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in forecastcontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0bf5c24a41bf16cf105b2e34fcbe1e3d4eeab21d46b31223ae5d38212d90c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lldb-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9916629b31632e8891a1ad6e398d0a3159ec2c1ba97501fbe7f68b29e77f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtarc-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32db4819ba93a8b0921f47e964c027a2b2059145afd483654479bf0de571187c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5066bc50b44dab03bb5e2e8d15f5c9a251d36a778fefebcf177d37a4fb2bc541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grnhse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b6c75934b4cc34daa998807a37386e7eb7fc5a327ee6046106bcb493dfe1903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in here-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e9aaca75bdf60b65470c5fcaa152405a670b25630ea9934606130862dca87b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nucleus-integration-js-dessert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6ff408b3af3849d782ccc9111df41c330380f7bc45681e171110a6ac0224ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tslint-blueprint-palantir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f64a2db0936cb6851f198d5c96fdbec01b8f09506dca325469623d0b6df8fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hubspot-url-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f3d21d05a3ccf0994ae24e3c6e69f922a55b888268df9607ab0215a226d9f68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tinkoff-talk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76741d903b6ba3173fc55b46fad124d52dd7f5d23c73107d5d43afb73db4a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calc_wqq3wgo8y9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0966b770cf36432964db8f19c884ead363812e7bacdae57fde54a372996a592 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75f389760a7d878693671186ab62e973c2092862d31ba75a2868b1ed1de45dcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @slashkit/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35990c03f090b9885d907c478482149de6887b75e253cfdc4e58d032f64293ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Quick and Simple: BPFDoor Explained

BPFDoor isn't new to the cyberattack game — in fact, it's gone undetected for years — but PwC researchers discovered the piece of malware in 2021. Subsequently, the cybersecurity community is learning more about the stealthy nature of malware, how it works, and how it can be prevented. What's...

Malicious code in oms-js-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f979ac49e09f1b3b30af6ae6dbf7c93f84fa24836cfcee4df4f677a1522dde6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Scripting. Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network...