MAL-2024-7131 Malicious code in @zitterorg/blanditiis-esse-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b85679f63de09f240f63d1340cbf5d3ba5e4733c1fa372cc72080657d1a942e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5216 Denial of Service in mintplex-labs/anything-llm

A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service DoS condition due to uncontrolled resource consumption. Specifically, the issue arises from the application's failure to limit the size of usernames, enabling attackers to create users with excessively bulky texts in the...

CVE-2024-5216 Denial of Service in mintplex-labs/anything-llm

A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service DoS condition due to uncontrolled resource consumption. Specifically, the issue arises from the application's failure to limit the size of usernames, enabling attackers to create users with excessively bulky texts in the...

CVE-2024-5216

CVE-2024-5216 affects mintplex-labs/anything-llm. The root cause is the application not limiting the size of usernames, enabling a DoS through denial of service via extremely large username values. Resulting impact is an unresponsive user management panel, preventing admins from editing, suspendi...

CVE-2024-21011

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracl...

MAL-2024-1146 Malicious code in btcbip-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9737e18ae546ade4c441015353a52355fce3be03f78c5f397a8c551978316073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-202 Malicious code in wlwz-2312-0305 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9ab712e750834dd11600a4b3bfca261b74ac57407bdf8c5b68b80821728d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-129 Malicious code in uptime-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a0e113f69232b20a00d710578e5aa983b5229e1eee46b549cecfd774a03e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

When unpausing the GuardCM, not setting governorCheckProposalId to 0 puts the assets of the protocol at risk

Lines of code Vulnerability details Impact If the GuardCM was paused once, the community multisig CM can pause it again without checking for the governances activity. This moves the power within the system from the governance to the CM and can, in the worst case, result in the lose of all funds o...

Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP Servers

A severity flaw impacting industrial cellular routers from Milesight may have been actively exploited in real-world attacks, new findings from VulnCheck reveal. Tracked as CVE-2023-43261 CVSS score: 7.5, the vulnerability has been described as a case of information disclosure that affects UR5X,...

SUSE SLES12: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2023:3443-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3443-1 advisory. Update to version jdk8u382 icedtea-3.28.0 - CVE-2023-22045: Fixed a difficult to exploit vulnerability that allows unauthenticated...

MAL-2023-688 Malicious code in pooled-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bdc927e1bd63772731d89e3cd44a51e7fc1d3884ede8cea40821cf6bd0b984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2954 Malicious code in f1pen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14c1dcf21e2f68afd899faac1227f7e68c55d1fef725bb62237561d86ea6517c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1819 Malicious code in cam.flcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3859a40c4216753f055024f49b606590fcfef785d00b2ed5ad96ca57b1668690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3358 Malicious code in gfg-gpe-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76ef99ca9c484e4dfe8e481e4310b165046491b4c7a8fd6018dfd811a9891e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7414 Malicious code in zsmjuedylcnhxiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b309be3bc8cbb1f394b0540dd902605523240fcf2f8c60db55f12cb51031c71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6622 Malicious code in tracker-radar-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c382860bcfb985e86aa7b648770475c9deebd558eb7815ffcd10f708348039a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5061 Malicious code in omar-evil-test-rpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5e94c35a9358e80839da1d1e54bf442ee12222b449aba7928ce4e04e801056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4252 Malicious code in lamalama (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad038d1be0dceb61216de89927133805a4bd57aaf1b6a111891e8518fecbc2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-439 Malicious code in @msmg/tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a121f4238105fd6fe7dcd1dc99a15348b5120d3fcbdabfa65cd741f1d9fb0100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...