CVE-2024-24105: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php...

CVE-2024-24105

The CVE-2024-24105 entry concerns Code-projects Computer Science Time Table System 1.0 (adminFormvalidation.php). The issue is an SQL injection vulnerability in that endpoint, enabling attackers to potentially run arbitrary code via that file. CVSS v3.1 metrics indicate Local attack vector, Low a...

Malware in ccl-product-carousel

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1086 Malicious code in pod-consumer-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790a64f75aa99c50c9bf2260bbd26b07020cf459a31f214e1a6a6c1336b62c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pod-consumer-backend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1087 Malicious code in rat-patrol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76425bdae39c104791dcaea76a06838a4ea7f3358370079dd8d2f40810f5b20d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1085 Malicious code in npm_macos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a42fad0192dbca5c33bdf6e5ed14d850ae1bb84dd8339ead7ba751657dd76fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm_macos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a42fad0192dbca5c33bdf6e5ed14d850ae1bb84dd8339ead7ba751657dd76fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starknet4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6b2cb58c40f7578d2e18d02fe088d5e163d1a0734db65c483c995c165c83c08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1091 Malicious code in udp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0339bd7712cdbec458d820fe33388f955c5fdd4fb38e14e3fad8b2f6f4313d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HP PC Security Vulnerability

HP PC is a computer product of Hewlett-Packard HP Company, USA. The HP PC has a security vulnerability that stems from a potential security flaw in the system BIOS that could allow memory tampering...

MAL-2024-1076 Malicious code in open-banking-reference-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75747b956f1d359e555bc99c3edaf59e37fef0f5cd43e5db2318fbf35c25fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 39 Update: grub2-2.06-118.fc39

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

MAL-2024-1073 Malicious code in dismissprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e57b2c157fbb4ae27dd1ea7ddb8c370c151171838b953706151a60c3399716b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1069 Malicious code in ifl-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c61d2851c227be102bd3adf8e2fd3b9636e417c5f026c3bcc2b91000551c4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1067 Malicious code in profectus-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062a69a64c4e77b2e5cebc7f5d21c239c51139c4d420c9fbf2e616f23ec838a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32264

CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer...

Update now! JetBrains TeamCity vulnerability abused at scale

JetBrains issued a warning on March 4, 2024 about two serious vulnerabilities in TeamCity server. The flaws can be used by a remote, unauthenticated attacker with HTTPS access to a TeamCity on-premises server to bypass authentication checks and gain administrative control of the TeamCity server...

MAL-2024-1060 Malicious code in unity-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d000b4d34f837a9755c05f72318c44ba0f8cf265e46224607cedae43aea73ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1064 Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...