Malicious code in get-twitter-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992f6ba616e5ed005fc045132424ad5c64e7a9d61fb073bb5891bd7f5c3f9f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8633 Malicious code in @lognex/services-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba6d3d357986e72d67ec3f308dd50c1159d1fb8d2a740a5eca2ba15388295d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8634 Malicious code in @lognex/services-routing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb68d761341d32450d82133ab94ed7d4f473b382988da338777e80955064a1c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8635 Malicious code in @lognex/services-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91ab6817c04922158a903afca0dcaaca5ecd44b0fa61757e7ed4c0011fc18f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8630 Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8631 Malicious code in @lognex/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9236ea5d072a10fa7e7acc48f2a65e85f8ad6cc9edd1158828a3ff4db63ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-49092

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

CVE-2023-6151

Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105...

CVE-2023-6150

The CVE-2023-6150 issue affects the Eskom Computer e-municipality module (versions prior to 105). The root cause is improper privilege management via the use of Privileged APIs, enabling collection of data provided by users and leading to potential information disclosure. Affected behavior is tha...

Malicious code in dusrtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 887b8aa099ab19624a642510e7775c2dabfea446420fc3cda1a29d5c3a20770b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8625 Malicious code in @ukncsc/my-ncsc-ui-common-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9535a39a8207d1d902daf4cfaaad312cc4bae19928fa3d2311e2be1f0ec9b027 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ESKOM Computer e-municipality module security vulnerability

ESKOM Computer e-municipality module is an application from ESKOM Inc. A security vulnerability exists in versions prior to ESKOM Computer e-municipality module v.105 that stems from improper privilege management and allows collection of user-supplied data...

ESKOM Computer e-municipality module security vulnerability

ESKOM Computer e-municipality module is an application from ESKOM Inc. A security vulnerability exists in versions prior to ESKOM Computer e-municipality module v.105 that stems from improper privilege management and allows collection of user-supplied data...

computer-associes.com Improper Access Control vulnerability OBB-3796148

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8610 Malicious code in docusaurus-plugin-matamoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587fce317c90b4371750f6dc2bd4c7d9ea86770d868b63eabf68afc96029c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8615 Malicious code in wehackrepos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c49ad5602ec9e0e00a9541dfd9e6fb3a7a4ae437f82ee23bd59a91ea4ec9e32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8601 Malicious code in purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 818b7cf6f19f5659849b9ba6ea11d5b53b47330d31838d371590e07f9107bfe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...