MAL-2024-934 Malicious code in iifl_ios_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649558fc7b693ec6cc0ca38419068e0fce94a2f6a6eeb5d01dad7674980357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-933 Malicious code in iifl_express_middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd6065d5aeb8d845fa2198e1ffedbb927895fbac183920ec87d85e89c79c03b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-931 Malicious code in iifl_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecff7586a2c0997d1bba9db37fd2d00f4574f29db7981fbf28119e1140d0438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in iifl_express_middleware

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in web-ai-51pwn

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in iifl_serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fee2df05c15b754e46f9e40e85e67b0499b639943c4674ff0ac4cce7a91aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-927 Malicious code in arduino-ide-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf7ca9bf0f189fb107121b5376feaf1535112a7c3e0c2d426fb74d95e3bf8f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-918 Malicious code in ent-cas-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59744cd81bbb57403b7e193539d0a5d994683a7ba843e0fceaf185a66b5a2d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-919 Malicious code in eslint-plugin-cas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34434c25cc547fc15a7c3f59fb63cd2697250ac930ac08f8ee019657417dc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6192027c3576f1efb2bbd06fa525cab0ca4115483f0e8df0a0d2c93f60b24a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

Ring curtails law enforcement’s access to footage

US law enforcement will no longer be able to request footage through the Neighbors app produced by Ring video doorbells and surveillance cameras. Until now Ring’s Request for Assistance RFA function allowed law enforcement to ask for and obtain user footage, but this function will be retired. Alo...

Chatbots and Human Conversation

For most of history, communicating with a computer has not been like communicating with a person. In their earliest years, computers required carefully constructed instructions, delivered through punch cards; then came a command-line interface, followed by menus and options and text boxes. If you...

Symantec Deployment Solution Security Vulnerability

Broadcom Symantec Deployment Solution is a solution for system deployment and management from Broadcom, Inc. A security vulnerability exists in Symantec Deployment Solution version 7.9. This vulnerability can be exploited by a remote anonymous attacker to remotely execute code as SYSTEM when...

CVE-2024-23613 Symantec Deployment Solution Remote Code Execution

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

MAL-2024-165 Malicious code in distube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-906 Malicious code in wlwz-2312-8107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3e723a378988af53667c99ddad5b34f5b5b1be60cf96b8b2e7c63d672c7731b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-858 Malicious code in wlwz-2312-7604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91797c5e408043b6bf399290ad49ebaefe256fb9d11e9ac3e53cc50f1bc8295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-891 Malicious code in wlwz-2312-8001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 403465c50450418345faa86dcf3f2bdf84dbafa32c5c028bf8181ee1b91fb555 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...