GLib: Privilege Escalation

Background GLib is a library providing a number of GNOME's core objects and functions. Description A vulnerability has been discovered in GLib. Please review the CVE identifier referenced below for details. Impact When a GDBus-based client subscribes to signals from a trusted system service such ...

CVE-2024-31586

A Cross Site Scripting XSS vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters...

Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1653 Malicious code in desainnew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bf842f0425d57bc046f2dfe5ca780425c5c598cddf38891bcb48821a75920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dsain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c297dbb19c09d8f71ccdbc712626dbf279bb972fe57afe0c04dc8e27f723a9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1658 Malicious code in nt4padyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813b8cef8cb7a828bbbf2b8edb29b1bbba72c65e7654fe80f07a80398a9e5133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1657 Malicious code in nodem0m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae93a7345bbc51bd2c0a267dc582cf90302284606b0f569ae06f4dc6a26f801a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pwi-cfa-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d39aaa33ecd66d4aac0437e45aa6a1cddcc74bb7ed416f6b33c3a7151cbc035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1644 Malicious code in pwi-cfa-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d39aaa33ecd66d4aac0437e45aa6a1cddcc74bb7ed416f6b33c3a7151cbc035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-24145 · Unknown · Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Computer Laboratory Management System version 1.0 Description: A Cross Site Scripting XSS vulnerability exists, allowing a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters. Recommendations: F...

CVE-2024-31586

CVE-2024-31586 affects Computer Laboratory Management System v1.0. The vulnerability is a Cross Site Scripting (XSS) flaw that allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters. The reported impact is limited to the ability to run code wi...

CVE-2024-31586

A Cross Site Scripting XSS vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters...

CVE-2024-31586

A Cross Site Scripting XSS vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters...

Computer Laboratory Management System Cross-Site Scripting Vulnerability

Computer Laboratory Management System is a computer laboratory management system. A cross-site scripting vulnerability exists in Computer Laboratory Management System version 1.0 that could allow a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a security issue in scsi bfa...

Internet Computer Protocol Launches Walletless Verified Credentials for Public Trust

Internet Computer Protocol ICP introduces Verified Credentials VCs, a walletless solution enhancing data sharing privacy. Unveiled at DICE 2024, VCs help combat bots and fake accounts on social media, ensuring secure and efficient verification...

Malicious code in rb-fare-breakup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a5d54730dc9f0fde2c00fc22012602258fa2002141d77e8c09f61347a82e33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logo-stylee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d393decd83d9e9777b1412a8994e72ccb1fdccc3a8157a431f4e72fe8553e717 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1639 Malicious code in stylee-logo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57b986ab11403a14ac18370067dd40fc0a3deca0e7580b55605078ea441e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ricoh Streamline NX PC Client Security Vulnerability

Ricoh Streamline NX PC Client is a document management PC client application from Ricoh Japan. A security vulnerability exists in Ricoh Streamline NX PC Client version 3.7.2 and earlier versions, which stems from the use of hard-coded credentials...