MAL-2023-1528 Malicious code in usaa-mock-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5984159a116b2da397135b921e07673806820b6693fa2e8e3695c1b4aef23de5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-remake-h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19053998e2ab25df5c7f4d43ec65d58f78399fc9bee16238f06d16e618898019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-croned (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ba169088500a21b145eedae248a2559396b1a61b20e6c2d41c0646fd9f74c43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22277

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314...

Malicious code in js-node-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b096038aa13ffe408e446c95499cf94a514d9231887e564f8ddd667f99e0ecf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2023-30577

AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705...

Malicious code in ux-translation-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1c7fc5ab29649fa65f5fbebcceb914ec5132e7c0a46b38a656b508274a5098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coingecko-prices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bee7aadebfb8b0a1f20f634d7079ec48f9ce73ecb3ca8dbf9d4c55cd2c7d402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-694 Malicious code in presto-webui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc84a4fe2d659dd1d6ab8f160c0c7c4a5f1920b754c9be7cccae485027e209e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tools-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30da78dfec11e1d381c43bdd8a43c45655acd9e01594fe5a1285e6b42d51b030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fhr-jake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332978484d39cfe7467149d4de9ced06cfe5cab362c268c181af479e3f9c73b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Memory corruption

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization...

CVE-2023-29147

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier...

CVE-2023-29147

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier...

CVE-2023-32201

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273...

Stack overflow

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273...

CVE-2023-32538

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32273 and CVE-2023-32201...

Malicious code in fc-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ffca641672539520dd6ae1301f0c09f9fd69d642335c83b5db13bdf7240961 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-keep-alive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367d61b371f78d311258a9310bdaf603198ee29c664779d5fc9777c75b51e4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...