MAL-2024-10693 Malicious code in axios-older (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1047fb8be55bb9b1906e2bc7b0b46f5194ebb21fe15d16f8c194ddcd95083bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10695 Malicious code in babel-plugin-transform-vuex-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in promotion-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9a77d5820e57e492fd4a0d3edaac6b239670f384d4cee56d88007f9550184b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10703 Malicious code in logjs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db9ce61ae79bc8f972d6275198581d1924f054967dfead3abccc970d1b77daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7787

CVE-2024-7787 is a Reflected XSS vulnerability in ITG Computer Technology’s vSRM Supplier Relationship Management System, due to improper input neutralization during web page generation. Affected versions are before 28.08.2024. The issue is documented across multiple sources (NVD, CVE List, Red H...

CVE-2024-7787 Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

CVE-2024-7787 Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting XSS. This issue affects vSRM Supplier Relationship Management System: before...

Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10700 Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10690 Malicious code in ax-ntlm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4f424aab2dcc6cf1cd2739c30f2b94d2137b9bc89a91aa17b8071ec23370a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10701 Malicious code in htp-https (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp-https (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c2627fae79f21d1e7b7ad7f9e9ebca90c821733e520f78eb372c1ca2bd247bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10691 Malicious code in axios-cookiesupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55368b5538a85341f64d31000a87573fb8c111b30fee01091ef7040841955a04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10688 Malicious code in agentbas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfe5ef012c0adecd9c6f95f9ba6f15164dc5fb1b5ef2eeaf55b8ca5adb125970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nod-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a1f4fa08a391ae008c71e6e7702d9ede5e8c5c147a62bf4409fe2df50a83ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10705 Malicious code in nod-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a1f4fa08a391ae008c71e6e7702d9ede5e8c5c147a62bf4409fe2df50a83ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-33303 · Unknown · Service Pc +1

Name of the Vulnerable Software and Affected Versions: Ventilator and Service PC affected versions not specified Description: The ventilator and the Service PC lack sufficient audit logging capabilities, making it difficult to detect malicious activity and conduct forensic examinations. An attack...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to gain access to confidential information.

The vulnerability of the Linux operating system’s SCSI kernel component is related to excessive data output in the scsihostdevrelease function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

ITG Computer vSRM Supplier Relationship Management System 跨站脚本漏洞

ITG Computer vSRM Supplier Relationship Management System is a supplier relationship management system from ITG Computer. A cross-site scripting vulnerability exists in ITG Computer vSRM Supplier Relationship Management System versions prior to 28.08.2024, which stems from improper input...

Malicious code in listing-sc-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...