MAL-2024-942 Malicious code in russiapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1e96f02c100786e7803d4038c785700157fa988cbf51067b6aa85d5a5e40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-943 Malicious code in take-cam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee2b55b60fc9b59f49dfd774411ff14fd939fdde2e9bb6fe39d19730bb910092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-936 Malicious code in jewishapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d1435255a826e73cab7760affeac8c2af279590c96b3b7470abe0630f4c1dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-929 Malicious code in dsc-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e99f436691aa5bed12da2fbf3273db2a6fc1989887f12d5b3602a74b4d2a0ae4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-938 Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-933 Malicious code in iifl_express_middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd6065d5aeb8d845fa2198e1ffedbb927895fbac183920ec87d85e89c79c03b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iifl_serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fee2df05c15b754e46f9e40e85e67b0499b639943c4674ff0ac4cce7a91aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-927 Malicious code in arduino-ide-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf7ca9bf0f189fb107121b5376feaf1535112a7c3e0c2d426fb74d95e3bf8f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-934 Malicious code in iifl_ios_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649558fc7b693ec6cc0ca38419068e0fce94a2f6a6eeb5d01dad7674980357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-931 Malicious code in iifl_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecff7586a2c0997d1bba9db37fd2d00f4574f29db7981fbf28119e1140d0438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-918 Malicious code in ent-cas-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59744cd81bbb57403b7e193539d0a5d994683a7ba843e0fceaf185a66b5a2d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-919 Malicious code in eslint-plugin-cas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34434c25cc547fc15a7c3f59fb63cd2697250ac930ac08f8ee019657417dc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6192027c3576f1efb2bbd06fa525cab0ca4115483f0e8df0a0d2c93f60b24a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

Ring curtails law enforcement’s access to footage

US law enforcement will no longer be able to request footage through the Neighbors app produced by Ring video doorbells and surveillance cameras. Until now Ring’s Request for Assistance RFA function allowed law enforcement to ask for and obtain user footage, but this function will be retired. Alo...

Chatbots and Human Conversation

For most of history, communicating with a computer has not been like communicating with a person. In their earliest years, computers required carefully constructed instructions, delivered through punch cards; then came a command-line interface, followed by menus and options and text boxes. If you...

Symantec Deployment Solution Security Vulnerability

Broadcom Symantec Deployment Solution is a solution for system deployment and management from Broadcom, Inc. A security vulnerability exists in Symantec Deployment Solution version 7.9. This vulnerability can be exploited by a remote anonymous attacker to remotely execute code as SYSTEM when...

CVE-2024-23613 Symantec Deployment Solution Remote Code Execution

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...