Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7faa105f44cbe37ad6640900de81ba2fd9b8d8a89555a095bee8fc30a934e3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hit-makers-the-science-of-popularity-in-an-age-of-distraction-by-derek-thompson-on-ipad-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 076db454192ff726a44259a97efbfa7696d32887045af6be417937ffc98f5537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-816 Malicious code in stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4cf640f96f10961f05d0b92040c27c3ddac884865e0fc98755cc84eab11ada Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-universe-has-your-back-transform-fear-to-faith-by-gabrielle-bernstein-on-iphone-full-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2dda2348af7d4384cb9a35d0387e5b87503b49779170d897bca656ab712b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jack_and_diane_nikita_king_epub_reader_best__lp5g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4963c7654aa0639d5c0800e6989736e039fd350cf745c6f9198946074a562a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noor_ul_iman_tarjuma_quran_pdf_free_free__kv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c6edd2df35820cb6c1d38a3fe06c9c836fe349e1aaacbc55af1a13620d4a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinsbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24df958f45174789a669d2bd93abb0ba014c2f3b2ba7a3f6604cd662bd31f0b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Open Networking Foundation ONOS 资源管理错误漏洞

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which can be exploited by a remote attacker to...

Malicious code in dreamteam11-google-tech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fa8233b2417c3495294e1fd0c5a031af4981dfcda1faa893025a52d760089e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-29465

SageMath FlintQS 1.0 relies on pathnames under TMPDIR typically world-writable, which for example allows a local user to overwrite files with the privileges of a different user who is running FlintQS...

No authentication is required when accessing another different Gateway VServer

Two Gateway Vservers with the same FQDN and VIP are created onthe same ADC but listed on the different ports8443 and 9443. If logging into Citrix Gateway1 with port 8443 first, and then open a new browser tab page to access Citrix Gateway2 with port 9443, users can see the published resources...

Improper Access Control

vantage6server is vulnerable to Improper Access Control. A remote attacker is able to bypass permissions and access unauthorized modules because assigning existing users to a different organizations is not restricted...

Malicious code in fca-dark-rulex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc65e0b0172e4250c22303c0778367df0d04b4256634ccb454dbff9bcd8415e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsang-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b349833c412697b8091d1f61d201e3f3d2a4790697fb032342d7cf857782bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-23493

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

CVE-2023-23493

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

K85235351: cURL and libcurl vulnerability CVE-2016-8624

Security Advisory Description curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL...

kubernetes: Unauthorized read of Custom Resources

A flaw was found in kubernetes. Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different kind in the same API group they are not authorized to read...

SUSE CVE-2009-4129

Race condition in Mozilla Firefox allows remote attackers to produce a JavaScript message with a spoofed domain association by writing the message in between the document request and document load for a web page in a different domain...

SUSE CVE-2012-3371

The Nova scheduler in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service excessive database lookup calls and server hang via a request with many repeated IDs in the...