MAL-2023-468 Malicious code in gd-apply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28fa196d02660fc75efc9c71f8cf8ee2ddc35286c432de6b7aa4f801a00a0013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-470 Malicious code in gd-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 190b8c40ae199e301f0ec2e1364caac0d49271c7fd8cc7ea7192502f06e2945c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-22 Malicious code in @12build/segment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856e63ff9eebaf0c3443eeee789588cf844ca28e1810394d67c01e5f5a4aa601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-20 Malicious code in @12build/account-api-ts-axios-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc5c5465a393a23f776128754b0543c03787f78e563b7142645453e912068ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Akbim Computer Panon SQL注入漏洞

Akbim Computer Panon is an application from Akbim, Inc. An SQL injection vulnerability exists in Akbim Computer Panon versions prior to 1.0.2, which stems from improper neutralization of a special element used, resulting in SQL injection...

Akbim Computer Panon 跨站脚本漏洞

Akbim Computer Panon is an application from Akbim, Inc. A cross-site scripting vulnerability exists in Akbim Computer Panon versions prior to 1.0.2, which arises from improper neutralization of input during web page generation...

PT-2023-17226

Name of the Vulnerable Software and Affected Versions Akbim Computer Panon versions prior to 1.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions prior to...

PT-2023-17225

Name of the Vulnerable Software and Affected Versions Akbim Computer Panon versions prior to 1.0.2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations F...

The vulnerability of the xirc2ps_detach() function in the Xircom 16-bit PCMCIA (PC-card) network adapter driver allows a hacker to escalate their privileges or cause service failures.

The vulnerability of the xirc2psdetach function in the Xircom 16-bit PCMCIA PC-card network adapter driver for Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

Ukraine Busts Gang for Massive $4.3 Million Phishing Scams

By Habiba Rashid The Ukrainian Cyber Police carried out 30 searches and managed to seize computer equipment, mobile phones, SIM cards, and other equipment. This is a post from HackRead.com Read the original post: Ukraine Busts Gang for Massive $4.3 Million Phishing Scams...

3 tips to raise your backup game

If there was an award for "most overlooked really important thing in computing", backups would win. Every year. So let's put that right and spend a minute or two thinking about backups. Backups are great! Having backups is like having a do-over for your mistakes, and who hasn't wished for that? A...

sum.com.tw Cross Site Scripting vulnerability OBB-3242729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-573 Malicious code in lupinfakepackagingforscanners (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca938918b5315749c762599827ac5c476263e5cff212e64bf8f03b65530b68f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-845 Malicious code in tdv2-service-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4717bc8c34854233c77434f3a33ad98f6e14140713eadbdd2bb539be09193daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-844 Malicious code in tdv2-applet-video-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da1ead0644279944ddb37ff7dda20637a0e69f7b394e09a54ab9aee33629e2d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-sports-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4dc4fa4bf228c9c09ee80e076570ba795f4bbf16efab3df7655ef3c27fa9993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-839 Malicious code in tdv2-applet-sports-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5a83b834f080ac2d6014a13d98f1f971219a3547e4ffce139f6a9dea8b26ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-833 Malicious code in td-service-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795a528873994ea135446c861a7fc9cb20977c13cafcb0b58ecc4f691614de90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-735 Malicious code in react-sports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a36f3d3c020e8060abbc0f642934bed99c8594f79b7306030d885b0bd3a838d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...