1340 matches found
different-angles.ch Cross Site Scripting vulnerability OBB-3754764
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in very-bad-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a68de920d68a5660a228e088d06a7f07cb4d9f30aa94c391e0b8fce37f11ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in so-loader-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404b6971c77426e284e330430c8b8f418e3a0622bc881dbc1dae7b32264ee032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eeddffrrvvrr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-30731
Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...
CVE-2023-30731
Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...
Malicious code in mariss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fedc08d9c32eb49c4500f9cb36ee2670f9c8ccd0491f6246e45c93fc8619a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in thinh2001-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f8d03b386fe1014644e4170699db11a1fccd1cec5639a5e99ac272d9fd12c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @zettle-bo/receipts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in agopoweryea123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5c5e5ef3f588541558976ee86112900b01f69ca9fe775b740d12315b8ddd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eters.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3cd7902eaf2be03129a18569c61c4f2ca2e0e980a7f9d52da0cdde33c51bb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in limitd-protocol (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaca8a4172555e8b77c7a19d6596b6f56a357374861835e8f805915783a482e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eth-web3-tx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ysb-ui-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa432ce2cbd4ac518b98792eaa7d0e0aab9e38367dcd6eaf756da080dde5567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in chatbot-community (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efbc44ac9dca194b96671df266fbb4f449c8641dbd574942431ab11e983f471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mmolecule-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd75dfd6fa092015612a7f926c3e00d1c329aae61bb248d16f548202fd68801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-20230
A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to read, modify, or delete non-tenant policies for example, access policies created by users associated with a different securi...
CVE-2021-33390
dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...
Malicious code in @lg-private/mongo-nav (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cfb13dbbdcd525742b9cca74fa4bac901e7a3e1601a9dba4e97986336210dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in business_api_client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e772f7acd6aafe36bc55e0babdbf512099d3be6de9a89e4dc31dce423b9f5753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...