PT-2024-29360

Name of the Vulnerable Software and Affected Versions Sourcecodester Computer Laboratory Management System version 1.0 Description The issue is related to incorrect access control in the delete category function, allowing authenticated attackers with low-level privileges to arbitrarily delete...

Computer Crash Reports Are an Untapped Hacker Gold Mine

One hacker solved the CrowdStrike outage mystery with simple crash reports, illustrating the wealth of detail about potential bugs and vulnerabilities those key documents hold...

MAL-2024-7987 Malicious code in syf-js-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd11ee2eda0c62bddc0911180b2cab0f64358311be2d26d2d63a903888be4d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7974 Malicious code in mma-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8182885b22933b5448abffbda9800a7a8417790bac7a8de29742961e393c6bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in click-action-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863f4bd9c81749474f2360ad027e111369d13c2c699078f5ae2311e627b0d2fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7963 Malicious code in incisive_testing_stufff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f03819dee879740c46b3604769e69cdb0402e7b91eed0ae39079f3306d5bad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in incisive_testing_stufff

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7946 Malicious code in desttest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce29abf82517f489205831e3afc5da12a742b761b3de9abfa53ab3d4b14b67b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in syf-component-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in localization-configuration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825c642696ea5f30780f48b909d4ab3e393a8e64c037249e775b138a1d2ac838 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8001 Malicious code in uitk-react-experimental-button-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d35a0704d9415d237418973ea82b6c991e02af5b2381fc696268805ff39a30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7938 Malicious code in bernie-plugin-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07de356e3393fbed6ef69233ceb23559daf6d36318e11f5355ae0dcbeac5f929 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8006 Malicious code in wistia_namespace.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37411af0efaa1331025c7ba0aaa00b729cc7b5eb9425392726c6f2c7de602179 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7950 Malicious code in dx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71179e532e0a9ad66fcf86c05453073081f7e77c7ffc4846697e843fe2ba1ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7936 Malicious code in bankrate-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 857d78d4a0691e2714e3c43f0001af9777c66644e48d145cc3ef19976a4feb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in babel-preset-sofi-scripts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7988 Malicious code in syf-multi-account-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ac62a649610f098e4f31e1bfccfd5101ab1f37dbf92420a4e80321b8f7a148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-preset-sofi-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f98a5f8b5f0da82a5cd8832e176ca57effe972fad5d0ef298183a66d9a60183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7948 Malicious code in desttestdsfasdfsdsds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2a374a5c82d7bef9432a28111aeb93645573f89265e50ff00fd207d960c23d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7982 Malicious code in react-hook-form-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7657179ab2d7f76638491093d7c970bd9685b7228d96bf1014ee8ea15606c45a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...