MAL-2023-436 Malicious code in fhr-jake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332978484d39cfe7467149d4de9ced06cfe5cab362c268c181af479e3f9c73b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-308 Malicious code in eone-gui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 918a850c8ec6b0b41a411a0def932e85ad9aba0a16d8fe866752386a2a59470b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-740 Malicious code in reat-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a3d57163b34785a2092a45dcf9e0e1601b827c144a5a955212214317de9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tranny-confessions-of-punk-rocks-most-infamous-anarchist-sellout-by-laura-jane-grace-on-audible-full (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c43dfa8095c3a0fc1ce7b9367b543b5421e7a34e5345e8b4eb5d83e57f29326b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wolfsong-green-creek-1-by-tj-klune-on-mac-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f0781efaf8e9d08c8e90ed6aac7126197785b4f607ec80206d240bf31cc9acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f41fb60beb906f09872435c3ee0bdf7290d56df0a8cf1a097f7416ce1b898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Advanced Host Monitor v12.56 - Unquoted Service Path Vulnerability

Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path CVE: CVE-2023-2417 Exploit Author: MrEmpy Vendor Homepage: https://www.ks-soft.net Software Link: https://www.ks-soft.net/hostmon.eng/downpage.htm Version: 12.56 Tested on: Windows 10 21H2 Title: ================ Advanced Host...

Malicious code in bleeding-edge-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9158e7fb120bf930c7e6ed6c50765fdc9d7c3d1a40435bf8a4b4d202cfd1dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path

Exploit Title: Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path Exploit Author: Laguin Benjamin MONK-MODE Discovery Date: 2023-19-01 Vendor Homepage: https://personifyinc.com/ Software Link: https://personifyinc.com/download/chromacam Tested Version: Chromacam-4.0.3.0 Vulnerabilit...

K46603852: Intel CPU vulnerability CVE-2017-5691

Security Advisory Description Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect...

MAL-2023-927 Malicious code in usamaturk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d02f6bdc2aef87b1fe34c7c3d0e97fe812b9e1be74c7c06da4c0a05e276a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2b501824b5dfb70ce9396faf12349f9d1090598f9297bd2c9a727ba1fd02a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-700 Malicious code in private-dependency-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389e0d778e23798e24433a25dc3f689bb12c1e235b3ebbf17de86d9d50a885b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @buffer-mono/non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24391afd972eb3f30c0c2a5e0ceaa4b67a2163a600a060cd41acb3d600b6467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-functions-apply-gce-sizing-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff71f573ab0c75770c1eb1201e5e39139353eacb5afd6db5270d684e0bee416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0012 Local Privilege Escalation in SAP Host Agent (Windows)

In SAP Host Agent Windows - versions 7.21, 7.22, an attacker who gains local membership to SAPLocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAPLocaAdmin are denied the ability to logo...

Malicious code in test-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e944bd9669b6670b936f57b7f11202f8a8c0bdf172864bc6e95f9ff567a97ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hiljsonhil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a91dadef06d9fd1634cbb1c33ed8a1fbaaa638e3fdc30d953d422e169b7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-493 Malicious code in @paid-cloud/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6526d3495433a8e4be3aff2466c4386392e997265dfe4500ab304d6be32cf2f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12629)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS has a security vulnerability that stems from the inclusion of a privileged context switch error, which could be exploited by an attacker to compromise the entire system...