Malicious code in dagster-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54576094f59a2d3e54d3be79e476c3b5cc7903ff5c0d5248784ab89ffa4e1dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The massive computer outage over the weekend was not a cyber attack, and I’m not sure why we have to keep saying that

Youre not going to believe this, but there was a lot of misinformation on social media over the weekend after the massive CrowdStrike/Microsoft outage. As airlines cancelled flights, hospitals had to reschedule patients and some companies just flat-out couldnt work on Friday, people were quick to...

MAL-2024-7805 Malicious code in httpsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2e3678fb0fcd1e38fa8e38b706128b14d6cd88892b5d2eace1580f584baa8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7807 Malicious code in webjsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41cce5996b48499aa091e08036886fb6c4b75bad613669a6f278e24b01bc11d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7806 Malicious code in overflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2742524e3d45bc5658d4f5feb0b8e3a1260967a2770e238934fa475a7e7e211b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7799 Malicious code in smart-input-textarea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffba47b31768b1363d5fd651769eb8bcb3f1112ca6db601bd51c7c44ec58adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7785 Malicious code in sap-abort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e2bde6bdff35f1e9b3c13cc8e0202b7b2b76d1390e81fc3ea3d484340f5f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7787 Malicious code in sap-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d699148992a2b2d20128893c0ba7a5d5022338a889ed430995f8dedc448f8a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7789 Malicious code in sap-accept (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fce9c57c312e62687f13f2fc582feb687da57944fca0f47efdadb6f55f8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How One Bad CrowdStrike Update Crashed the World’s Computers

A defective CrowdStrike update sent computers around the globe into a reboot death spiral, taking down air travel, hospitals, banks, and more with it. Here’s how that’s possible...

Malware in firefly-sdk-ts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Computer Laboratory Management System SQL Injection Vulnerability

Computer Laboratory Management System is a computerized laboratory management system. A SQL injection vulnerability exists in Computer Laboratory Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter id. An attacker can exploit this...

CVE-2024-6802 SourceCodester Computer Laboratory Management System Master.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=saverecord. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-6802 SourceCodester Computer Laboratory Management System Master.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=saverecord. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

CVE-2024-6802: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=saverecord. The manipulation of the argument id leads to sql injection. It is possible to launch the atta...

Malicious code in mock_simple_module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed9bf47a3711f757443a62c5b348e369a86608eb2038f307aa88e8f2f4e710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-48791

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sastask Currently a use-after-free may occur if a TMF sastask is aborted before we handle the IO completion in mpisspcompletion. The abort occurs due to timeout. When the timeout...

MAL-2024-7764 Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7766 Malicious code in selfbot.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb151c00154198176313030563b649e051266589b603c6f66325730afa5d5d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7751 Malicious code in img-aws-s3-object-multipart-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64fdc2d1b94cc9bdb2bee2f06bd13d0be50208d8185a82a733718d2edcdcee70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...