Malicious code in wlwz-2312-1402 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4446492a1d2315d695b4a7eb0d53f1b1998469f0abbe979a61d9414d16ca019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-294 Malicious code in wlwz-2312-1307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 147211105cb305b8c4bfb75f6bc668f0849b0295678ff71f00dc87183a2e4920 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-167 Malicious code in wlwz-2311-0100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ca0d5184e9f21028e0ecd6f6a21e6ea13171f13ef7953a51c2430e97dcac060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Access Control

Gitlab is vulnerable to Improper Access Control. The vulnerability is caused due to improper permission validation while granting access to git lab projects. An attacker can fork a project outside of current group and can compromise the target system...

Malicious code in biobot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b2c26ec52eb2c7fbc6aca147f99990d56fd9eb9c51517b6b3aa7f41755adb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lognex/services-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bffc36961ebbc0c14cde7de119a760020e401111ed84f570e3473f12d23557a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8452 Malicious code in bt8-wax-front-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94edc2702431bf0ca422456566133b260f48b21d456989d157837fbf5e4d80ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Personal Communications could allow a remote user to obtain sensitive information including user passwords, allowing unauthorized access. (CVE-2016-0321)

Summary IBM Personal Communications is susceptible to unauthorized access vulnerability when running on a compromised system by the victim opening a mail with a malicious attachment or visiting a malicious website. Malware could run with user privileges but not necessarily having access to the...

F5 Networks BIG-IP : BIG-IP Engineering Hotfix authentication bypass vulnerability (K55655944)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K55655944 advisory. - BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with...

MAL-2023-8343 Malicious code in pragmaticplay-situs-slot-online-banyak-hoki-paling-terpercaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0bb9559484405e38427ba29fe4572ce1df42fa5a9932f8f785d2ed5295f3240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8338 Malicious code in eslint-config-ufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13cd442aa3044be70291a17da8e14dfd4e8f56bd9f1cadd33096870c70202648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8339 Malicious code in fas_elbridge_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eeb55ec40cca8a30b5ca2b20ede9234fa59a23da2fa5cef2ad9c3e461eba4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8283 Malicious code in meta-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 033ddca5be0ef22d5f49ddd093bf8373f6f58bc37ed6e1ddf0e6481e013df51a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Arbitrary File Write

github.com/schollz/croc is vulnerable to Arbitrary File Write through crafted File Paths. The vulnerability is due to the Croc protocol which allows senders to specify sn arbitrary path for a file transfer. If the recipient doesn't already have a file with the same name, an attacker can exploit...

MAL-2023-8113 Malicious code in developer-scaffold-full-width-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de16c923e65362f8728b3d71ad9d78042c8f28793d8d720d387faf6316d8b174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8095 Malicious code in xweb_3.0_rootlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b68a19a581e7e416f374c8f4dbd698f686a84086c9edf764c67788762bec05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cxday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337ddbb53f9f6b87096ad49167380b2190f06b80c03e8d904f742a33e71b6596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7981 Malicious code in emon-test-emon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070f47b075b6837108f6bf3ee63c44f7a41728c57a578783719968e8f4887ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-521 Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-428 Malicious code in fca-tuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d79cf7f0c8b529c853f6fad71dbc1ce8655d7f7356cf001fe8c6b5142ed7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...