Malicious code in discord-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f41fb60beb906f09872435c3ee0bdf7290d56df0a8cf1a097f7416ce1b898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Advanced Host Monitor v12.56 - Unquoted Service Path Vulnerability

Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path CVE: CVE-2023-2417 Exploit Author: MrEmpy Vendor Homepage: https://www.ks-soft.net Software Link: https://www.ks-soft.net/hostmon.eng/downpage.htm Version: 12.56 Tested on: Windows 10 21H2 Title: ================ Advanced Host...

Malicious code in bleeding-edge-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9158e7fb120bf930c7e6ed6c50765fdc9d7c3d1a40435bf8a4b4d202cfd1dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path

Exploit Title: Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path Exploit Author: Laguin Benjamin MONK-MODE Discovery Date: 2023-19-01 Vendor Homepage: https://personifyinc.com/ Software Link: https://personifyinc.com/download/chromacam Tested Version: Chromacam-4.0.3.0 Vulnerabilit...

K46603852: Intel CPU vulnerability CVE-2017-5691

Security Advisory Description Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect...

MAL-2023-927 Malicious code in usamaturk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d02f6bdc2aef87b1fe34c7c3d0e97fe812b9e1be74c7c06da4c0a05e276a45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2b501824b5dfb70ce9396faf12349f9d1090598f9297bd2c9a727ba1fd02a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-700 Malicious code in private-dependency-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389e0d778e23798e24433a25dc3f689bb12c1e235b3ebbf17de86d9d50a885b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @buffer-mono/non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24391afd972eb3f30c0c2a5e0ceaa4b67a2163a600a060cd41acb3d600b6467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-functions-apply-gce-sizing-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff71f573ab0c75770c1eb1201e5e39139353eacb5afd6db5270d684e0bee416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0012 Local Privilege Escalation in SAP Host Agent (Windows)

In SAP Host Agent Windows - versions 7.21, 7.22, an attacker who gains local membership to SAPLocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAPLocaAdmin are denied the ability to logo...

Malicious code in test-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e944bd9669b6670b936f57b7f11202f8a8c0bdf172864bc6e95f9ff567a97ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hiljsonhil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a91dadef06d9fd1634cbb1c33ed8a1fbaaa638e3fdc30d953d422e169b7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-493 Malicious code in @paid-cloud/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6526d3495433a8e4be3aff2466c4386392e997265dfe4500ab304d6be32cf2f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12629)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS has a security vulnerability that stems from the inclusion of a privileged context switch error, which could be exploited by an attacker to compromise the entire system...

MAL-2022-3069 Malicious code in flashloan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b318d8644a2e5f56d435a65d5df7d81c078bdf2f95b231006a90d5dc67bdb754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-932 Malicious code in alias-for-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d454b09899f2b5bf09380b8c0ec207d7347f09b5121d3b77e0d9d6e255e86dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in freekws-devportal-api-client-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6844a713c19484257db4a41fa914be2ee9dd774feb1dcec5698ce8fdb776066f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6349 Malicious code in suorce-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0701cc6f6fa29d40dc09dd9424ce2419cb2621996a99965b425ffd32ca243985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6743 Malicious code in uglp-rename (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75fbb23c62d1ab4ffa42df080d367fada394ce5c51afcccc2b4957dc215d73b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...