CVE-2023-36808 GLPI vulnerable to SQL injection through Computer Virtual Machine information

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. As a workaround, one may disable native...

MAL-2023-160 Malicious code in carbon-sageone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dd56dd7300d3e57844b0cda4d9223dc1874d2e0db91e2308fd11ff2ac5a2d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GLPI vulnerable to SQL injection through Computer Virtual Machine information

[email protected] reports: GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue...

Malicious code in blossom-flex-ui-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45835a19933049983c803d03cb5c9fe34157fa2a4d00823f43d60983bbc79966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-136 Malicious code in blossom-flex-ui-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45835a19933049983c803d03cb5c9fe34157fa2a4d00823f43d60983bbc79966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-307 Malicious code in env-cross (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dfac7391de71e5fbbea3c5880d76d0fada380dc4026cd39541ac9684098b56e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-cross (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dfac7391de71e5fbbea3c5880d76d0fada380dc4026cd39541ac9684098b56e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-417 Malicious code in fca-rqzax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c98a4aa34af7d5974aa6af6ad233eb8eba8a665b37369c4dfb0608bbe979ea2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-749 Malicious code in rqzax-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84c5b52ec28f42cffc2ec18e27f39dc1c908add4471e1ae31eeea8e752e07e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1009 Malicious code in zoomapps-customlayout-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07392edf92e8d29e546869050e65c3d70bdf3d86285cd245a1464a1a4c4d560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in velor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dd8323c45be30eda6a4167c8e3799e4d598711e2568b55238dfea09e727326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-933 Malicious code in velo-external-database-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c7e720483399030f4aa6ca225732c8aab633f862302071086c02e3d990993a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-968 Malicious code in wix-fitness-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-756 Malicious code in samplepackagedemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c55c21d2ed72077608698c710d7eb69de600ca8f9e45b448f7b5769c6bbf0c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in catteleya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9c8f112541c7f415a060c136109b57be2b983aeab2087f5ac85e0b553baec75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-164 Malicious code in catteleya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9c8f112541c7f415a060c136109b57be2b983aeab2087f5ac85e0b553baec75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-399 Malicious code in fca-horizon-remastered (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e4b2051f69220a9caa031f9973e92468b01c05b2c9688ea2aa5e0931e8467e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-621 Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-973 Malicious code in xml-fast-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f72595dbe55afb8789d70686d9dfc77d102733a2090e76b1063b8a75dedd697 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-526 Malicious code in ing-orange-be-isabel-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ce7051b695847f4d4250516dd3188a5d6221f66c81b500bacac67d1154d380 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...