The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent allows attackers to gain unauthorized access to protected information.

Acronis Agent’s backup and recovery software for computers and servers involves exposing protected information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Malicious code in bank_cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70064e0fa01accdeb5e78c99cf3b86d47cff2ad6e3bec52c9e45091e600bc5fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @badolkhan420/fca-badol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436ac692985a2fae4a79ec7010810f6a2b4d617ea932fab96f222989b578f74b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meta-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a73a2b61674138aaa5e5aad870296f68427a507164b679a24fbb061518fda8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple macOS Security Breach

Apple macOS is a dedicated operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access calendar data saved to a temporary directory...

Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in facebook-asuna-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2596e9dc89e4123b4f9e19dd355b77bb6fd9490a73d6e457daded1ec3ff8b89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6262bbe576936f351b23ae859a7a6109329ac53866ece0189c1a9feee444159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

CVE-2022-3916 Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

Malicious code in beta-fhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-chana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37e708fb080fb543bd5fca9f8e273bf71bd0fb1744e3026ea3e491a298cf8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8141 Malicious code in helyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d4943ad77667e1d436da638aad2868bd742a2568f7f706380ef3b768a98fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nvthinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b205106bb201085c25d6e96124abcba44002344c6fe23341cbb164c753860ef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nvthinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461728de25ed03b83136b1135b9729cf11914136dab3f1133f47339e61f2bac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nvt2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 742a4f37b50ce7e6a47d9abb8a884136074c8ae8db136e62180e71114aa1b89a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...