MAL-2023-518 Malicious code in il-shopify-osm-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59867423ea3b374a7842d8ca92f05a9b685f8c826bc45939ba1af80f2d088661 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LockBit Ransomware Now Targeting Apple macOS Devices

Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple's macOS operating system. The development, which was reported by the MalwareHunterTeam over the weekend, appears to be the first time a big-game ransomware crew has...

MAL-2023-289 Malicious code in dreamteam11-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f760fb2e0f1f22f54f8e0db3457dc3a9ca3d481b743d22df2ebefc64619b7284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dreamteam11-google-tech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fa8233b2417c3495294e1fd0c5a031af4981dfcda1faa893025a52d760089e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29381)

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability in the file /classes/Master.php?f=updateorderstatus, where the parameter id of the function...

Online Computer and Laptop Store delete_order function SQL injection vulnerability

Online Computer and Laptop Store is an online computer and laptop store. An SQL injection vulnerability exists in Online Computer and Laptop Store v1.0, which originates from the function deleteorder in /classes/master.php?f=deleteorder where the parameter id of deleteorder lacks validation for...

Gaining an Advantage in Roulette

You can beat the game without a computer: On a perfect roulette wheel, the ball would always fall in a random way. But over time, wheels develop flaws, which turn into patterns. A wheel thats even marginally tilted could develop what Barnett called a drop zone. When the tilt forces the ball to...

Troubleshooting No Signal Monitor Issue: Steps to Get Computer Display Back

By Owais Sultan If you encounter a "No signal" issue on your monitor despite your computer being powered on, and you… This is a post from HackRead.com Read the original post: Troubleshooting No Signal Monitor Issue: Steps to Get Computer Display Back...

MAL-2023-432 Malicious code in fca-zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647625dc78eb955e2d970aa60159a08d9e50e1e80f1be250861c8428d918935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1005 Malicious code in zach-remadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f50cccaa2f4485221ea7d325dccdcb0b35607b2a4a228bfea96442275bcb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1004 Malicious code in zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e27245be58fc94ee9cb1f874ee0312902cdac4fd9d444c865442922683fe9aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Jenkins: Temporary plugin file created with insecure permissions

A flaw was found in Jenkins. Jenkins creates a temporary file when a plugin is uploaded from an administrator’s computer. If these permissions are overly permissive, they may allow attackers with access to the Jenkins controller file system to read and write the file before it is installed in...

Malicious code in testpackyeaaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5b13be95f557fcc861cb88bec3bc7822081d2b58481fc426ad0d80583e85ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1000 Malicious code in ynodejs_mod_log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861d73fdebc783ac105077a9c4483c1c7e4528821dcd7c8e7b8a1e27bbed1f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uploadcare-wordpress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3539d032a58d539f1abeeed7c1e64a239da65fb248c8155e75f524875042d60c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-921 Malicious code in uploadcare-tinymce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a639188015774141a6e7828027fb105771e51cf101e48ebab5dc6d652e63ed92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-201 Malicious code in com.example.show-toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4961545d6c31acce87aae4be45c313c9bc7a0ce3e72eda23cced115c94c489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-467 Malicious code in gatsby-remark-images-uploadcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfedda25b5f48c47bf9fe91a2cc6ca0cd8ed5086ecf715776b934cabd3b554ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-288 Malicious code in dream11-fc-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc3d2ee3ad7ffe496784962936c16152411b411fea5dc756874f7bcfdf7c21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-1986

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function deleteorder of the file /classes/master.php?f=deleteorder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...