MAL-2024-1639 Malicious code in stylee-logo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57b986ab11403a14ac18370067dd40fc0a3deca0e7580b55605078ea441e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ricoh Streamline NX PC Client Security Vulnerability

Ricoh Streamline NX PC Client is a document management PC client application from Ricoh Japan. A security vulnerability exists in Ricoh Streamline NX PC Client version 3.7.2 and earlier versions, which stems from the use of hard-coded credentials...

Ricoh Streamline NX PC Client Security Vulnerability

Ricoh Streamline NX PC Client is a document management PC client application from Ricoh Japan. A security vulnerability exists in Ricoh Streamline NX PC Client that originates from a vulnerability that allows an attacker to tamper with arbitrary files on the PC where the product is installed...

MAL-2024-1623 Malicious code in corraldev-activationsvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783e4eb475d74b1b4adc4aa4851393ded5ef222b3779734a8b1e4fe125605c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @cart-ui/core-i18n

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-37306

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. Starting in version 2.2.0 and prior to version 2.14.3, if an attacker can trick a logged-in CVAT user into visiting a malicious URL, they can initiate a dataset export or a backup from a...

Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

The Cyber Police of Ukraine has announced the arrest of a local man who is suspected to have offered their services to LockBit and Conti ransomware groups. The unnamed 28-year-old native of the Kharkiv region allegedly specialized in the development of crypters to encrypt and obfuscate malicious...

MAL-2024-1608 Malicious code in legacyreact-aws-s3-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60942b87c6d2334d09d059276cc2d838002e2e0f5093e53fc6819e1972e02282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1604 Malicious code in @yashorg/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff07f4f96c73a58bf8e1069d844465549fbe1c2a9dd169ef994b1124c5a143e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37306: Cross-Site Request Forgery (CSRF)

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. Starting in version 2.2.0 and prior to version 2.14.3, if an attacker can trick a logged-in CVAT user into visiting a malicious URL, they can initiate a dataset export or a backup from a...

CVE-2024-37164: Server-Side Request Forgery (SSRF)

Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. CVAT allows users to supply custom endpoint URLs for cloud storages based on Amazon S3 and Azure Blob Storage. Starting in version 2.1.0 and prior to version 2.14.3, an attacker with a CVAT...

PT-2024-27348 · Microsoft +1 · Azure Blob Storage +1

Name of the Vulnerable Software and Affected Versions: Computer Vision Annotation Tool CVAT versions 2.1.0 through 2.14.3 Description: The issue allows an attacker with a CVAT account to exploit a feature by specifying custom endpoint URLs for cloud storages based on Amazon S3 and Azure Blob...

CVAT Security Vulnerabilities

CVAT is an interactive video and image annotation tool for computer vision. A security vulnerability exists in CVAT version 2.2.0 through versions prior to 2.14.3. An attacker exploiting this vulnerability could obtain media files, annotations, settings, and other information from any project,...

CVAT Security Vulnerabilities

CVAT is an interactive video and image annotation tool for computer vision. A security vulnerability exists in CVAT Computer Vision Annotation Tool version 2.1.0 through versions prior to 2.14.3. An attacker can exploit the vulnerability to obtain sensitive information...

Malicious code in v2-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e0286004b6b184a7ae2c0a7110095cd51122ae1c9ccc69db8d1bfd7380dfed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1598 Malicious code in ozon-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a05e800a141f7c456358b5d20b4e3cebc65f9d0229d0024fae5b1e51ed1e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8224957c90ee66ed3cc6af4e8b300d5eb082f8368f94b725e53bbfed9ccbf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1593 Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33c62d31d74de8fa6a7a3911507ce9a8d513bccb45ff1b51b7fbb9068920d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1594 Malicious code in atoz-attendance-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff390162beebf06ba564766a3ffc0a06c520792994c16cba3ea0d97ea64d1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d714a330056d61b303e703615cd667da1871ff920b7563ed5d20d42d5b68c7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...