Malicious code in wlwz-2312-4505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b35d47989aefe03159e1d82032e9c524f283c28c39f071aa8f5965003661acd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1a76e0eae88546d615f46226e5d8e41877b30e4e3bccc6dd9ba9b975d9f1ff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

Malicious code in ahmadzdzdzdzddddahas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f10f881888721e5e7bcdd3cb99e15e7948d9c5eadbb869e8ebb9bd54faebd96d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oscompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9569a20b29ab9fcf758c7fa43268c1d1d42034ef4b8d06ec9f234e008e27d54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Open Redirect

GitLab is vulnerable to Open Redirect vulnerability. The vulnerability is caused due to improper URL sanitization in Gitlab. This could allow an attacker to create a URL that would redirect to a different project...

Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DRUPAL-CONTRIB-2023-054

The Group module has the ability to make content private to specific groups. When viewing a list of entities, e.g. nodes, a visitor should only see those entities that are either not attached to a group or that they have group access to. The module doesn't sufficiently enforce list access under t...

CVE-2023-48369 Log Flooding due to specially crafted requests in different endpoints

Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log...

kernel: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix sharedcpumap to handle shared caches at different levels The cacheinfo sets up the sharedcpumap by checking whether the caches with the same index are shared between CPUs. However, this will trigger...

different-angles.ch Cross Site Scripting vulnerability OBB-3754764

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in very-bad-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a68de920d68a5660a228e088d06a7f07cb4d9f30aa94c391e0b8fce37f11ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in so-loader-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eeddffrrvvrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-30731

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...

CVE-2023-30731

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...

Malicious code in mariss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fedc08d9c32eb49c4500f9cb36ee2670f9c8ccd0491f6246e45c93fc8619a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f8d03b386fe1014644e4170699db11a1fccd1cec5639a5e99ac272d9fd12c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/receipts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agopoweryea123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5c5e5ef3f588541558976ee86112900b01f69ca9fe775b740d12315b8ddd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...