MAL-2024-1309 Malicious code in npm-package-shirley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bfc7deaed3dbd7f0253cf5cbc9c24ef076ab683fe3ca0aa06231c59f1fd36c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: scsi: qla2xxx: Array index may go out of bound

A flaw was found in the Linux kernel qla2xxx SCSI driver. A static analysis tool reported that the array vha-hoststr, sized to hold 16 characters, could be indexed with values outside its valid range, potentially leading to out-of-bounds writes. The root cause was the use of sprintf without...

kernel: scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Check valid rport returned by fcbsgtorport Klocwork reported warning of rport maybe NULL and will be dereferenced. rport returned by call to fcbsgtorport could be NULL and dereferenced. Check valid rport returned b...

Malicious code in ethutility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d7a11441aebc92f1c803484e58720849e1bf6d75cf48b0df69ecc83fa25453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-transactions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31d30dcd73ba06a4962c3e3b0419d5864aa9f93f1dcf516e1830eafa40f44ab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1306 Malicious code in ethers-transactions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31d30dcd73ba06a4962c3e3b0419d5864aa9f93f1dcf516e1830eafa40f44ab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1714073581 Fix of 16 CVEs

Jammy update: v5.15.81 upstream stable release LP: 2003130 // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipcconnalloc - tipc: add an extra connget in tipcconnalloc CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with lega...

MAL-2024-1302 Malicious code in relinquishsecurecontinuous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332015da529900f170cdc913a3c59ca2143f0edc5685ad9b7f57329549cccfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1301 Malicious code in pleadappointmentat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482e3cbe96ee431fd77b6b838737cf23cf41101c0ae97be63d24d745f5eb2429 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pardonbeefconfession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81ea718272d3ee7ab9a60a488478726e2315992d23324f21ae8cee54bfc6709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1299 Malicious code in driftdegreerubbish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688166bf96a013e712d77d2bf9efa610dcdedc47a7f31e753db95d93a8ba2e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

[SECURITY] Fedora 40 Update: grub2-2.06-121.fc40

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

MAL-2024-1283 Malicious code in cuckoo-3-web-ui-tooling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbea70f2acb33710c8ecb7e13e55c24980ccd349854aa6c82915d2829359e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1293 Malicious code in swift-docc-rendeeeeeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e4d71b34d2eb0cd66dc9d19da997d325017d19687f304f39e1138fe0a0f0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1295 Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1287 Malicious code in ecs-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308d5a6fa5eb0973b0ff8290c321ac60685b686f42543a7a09b16a5fe56a7457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-caches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c46cf6695c1ee706d7c20760d479bc271d109c548485e896885c9f7b6d704928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...