CLSA-2024-1714073581 Fix of 16 CVEs

Jammy update: v5.15.81 upstream stable release LP: 2003130 // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipcconnalloc - tipc: add an extra connget in tipcconnalloc CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with lega...

MAL-2024-1301 Malicious code in pleadappointmentat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482e3cbe96ee431fd77b6b838737cf23cf41101c0ae97be63d24d745f5eb2429 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1302 Malicious code in relinquishsecurecontinuous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332015da529900f170cdc913a3c59ca2143f0edc5685ad9b7f57329549cccfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1299 Malicious code in driftdegreerubbish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688166bf96a013e712d77d2bf9efa610dcdedc47a7f31e753db95d93a8ba2e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pardonbeefconfession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81ea718272d3ee7ab9a60a488478726e2315992d23324f21ae8cee54bfc6709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in relinquishsecurecontinuous

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

[SECURITY] Fedora 40 Update: grub2-2.06-121.fc40

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

MAL-2024-1283 Malicious code in cuckoo-3-web-ui-tooling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbea70f2acb33710c8ecb7e13e55c24980ccd349854aa6c82915d2829359e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1293 Malicious code in swift-docc-rendeeeeeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e4d71b34d2eb0cd66dc9d19da997d325017d19687f304f39e1138fe0a0f0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in teleport-app-example-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1295 Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1287 Malicious code in ecs-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308d5a6fa5eb0973b0ff8290c321ac60685b686f42543a7a09b16a5fe56a7457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in cuckoo-3-web-ui-tooling

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1285 Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-caches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c46cf6695c1ee706d7c20760d479bc271d109c548485e896885c9f7b6d704928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1286 Malicious code in djs-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cea4fbbb1333188e78d11622c9b943608aea6770144dacf6e1184036a646b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...