MAL-2024-10918 Malicious code in bigumner-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0ecfa30eaa3a6f615e3a69a8c0fa4b182d52f6632dd44848e5fff7acbdb5ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10917 Malicious code in bignum.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cae8d88da855b7f1d0c7666e2d5ae9cb3e0ef71c476cedabfdd84863420c452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10923 Malicious code in delta-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clarity-lsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50678beb5a4a291bb4ab69b2eb693fe20be992d14d36cbcfae5fee26bbb65c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dashlane-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f2a48c1181725012456cc91fb5af9013cdea7e6e5b193c8cd5947f247a4d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7130

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS. This issue affects KION Exchange Programs Software: before 1.21.9092.29966...

CVE-2024-7130

CVE-2024-7130 describes a Reflected XSS in KION Exchange Programs Software (affected: versions before and including 1.21.9092.29966) due to improper neutralization of input in web page generation. The vulnerability affects the programsearch.aspx endpoint where the searchtext parameter is not sani...

CVE-2024-7130 Reflected XSS in Kion Computer's KION Exchange Programs Software

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS. This issue affects KION Exchange Programs Software: before 1.21.9092.29966...

CVE-2024-7130 Reflected XSS in Kion Computer's KION Exchange Programs Software

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS. This issue affects KION Exchange Programs Software: before 1.21.9092.29966...

PT-2024-17095 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cljs-dopeloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9232bb9421a218946057ab6688d62120e80b911ca38062d0ae6c42a951d2cddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scm-retail-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5c9460f2f7b76b7df92b6f3c8f8237b18cac972b6424471eae0ccd9c78963d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rollup-plugin-amd-output-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dce851722a146abc3b5df317ad799e1753177138eeb4efa09300da2f6625f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prxy-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ba7e4f495217937a8213c982cd27fd211680e174266b6ae21aa6c24beaebf20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7787

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

Malicious code in axios-older (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1047fb8be55bb9b1906e2bc7b0b46f5194ebb21fe15d16f8c194ddcd95083bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10698 Malicious code in commitlint-config-jira-type-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3a60114c639e9e20430efd4c98505d38340a52eece4ea1eb6eca3117556cc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...