Malware in iifl_express_middleware

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-918 Malicious code in ent-cas-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59744cd81bbb57403b7e193539d0a5d994683a7ba843e0fceaf185a66b5a2d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-919 Malicious code in eslint-plugin-cas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34434c25cc547fc15a7c3f59fb63cd2697250ac930ac08f8ee019657417dc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6192027c3576f1efb2bbd06fa525cab0ca4115483f0e8df0a0d2c93f60b24a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

Ring curtails law enforcement’s access to footage

US law enforcement will no longer be able to request footage through the Neighbors app produced by Ring video doorbells and surveillance cameras. Until now Ring’s Request for Assistance RFA function allowed law enforcement to ask for and obtain user footage, but this function will be retired. Alo...

Chatbots and Human Conversation

For most of history, communicating with a computer has not been like communicating with a person. In their earliest years, computers required carefully constructed instructions, delivered through punch cards; then came a command-line interface, followed by menus and options and text boxes. If you...

Symantec Deployment Solution Security Vulnerability

Broadcom Symantec Deployment Solution is a solution for system deployment and management from Broadcom, Inc. A security vulnerability exists in Symantec Deployment Solution version 7.9. This vulnerability can be exploited by a remote anonymous attacker to remotely execute code as SYSTEM when...

CVE-2024-23613 Symantec Deployment Solution Remote Code Execution

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

Moderate: Red Hat Security Advisory: grub2 security update

An update for grub2 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

MAL-2024-165 Malicious code in distube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-315 Malicious code in wlwz-2312-1601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bc0e7158d5619f4e675f0c91a267739b04b6497be26ddeaa336c28335e8a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-893 Malicious code in wlwz-2312-8003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 178876b31e9d92e82ebe96bc723e5a3e0bbab6e726dcdaf226b6e349de3ac061 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-904 Malicious code in wlwz-2312-8105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e324fa0bbd163b84f143cfdf696328031ae60c94d27665fdb29101da05a14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-885 Malicious code in wlwz-2312-7904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baca6b336baaa73d4bb4e2e5bffb1ecc4447699637d6d7b60302bcd641132c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-255 Malicious code in wlwz-2312-0904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6973f9f9e2a775db6577a008291d3ed732fcbd9a6a9ed749532a3722341aba12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-531 Malicious code in wlwz-2312-4001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b85f35b54205e38fa9e30703d677130b295a39c7ec6669f95d5c9979a9544c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-874 Malicious code in wlwz-2312-7802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383a653fcb7cd0c241c0668f26b31ffa7a6f6b704808f63c3a77b222165ca33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-854 Malicious code in wlwz-2312-7600 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f35a0a3e19768b5a789b2da58af8c3df97e105103c97302083210f8a53f9be8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-548 Malicious code in wlwz-2312-4200 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aca3b5385fea043f992949ee07e3e691da47280b01692b37c3d28e1d6104326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...