Malicious code in client-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b972deca5352be5ff4ad1c1ca8d1b1da5c8f7f124ff1202510ecc3136ab617b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11908 Malicious code in windows-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 613ba7ede540f232f2e844b88d0e3dbdee0806c83dfbf4cf4bf4ca7a5430aa33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @wf-ceo/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d9532f6b28af2ee9239943a59872699feb8d2be0455e9b0bfc67989028acaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

QNAP Systems QTS和QuTS hero 格式化字符串错误漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. QNAP Systems QTS and QuTS hero have a format string error vulnerability that stems from a format stri...

QNAP Systems QTS和QuTS hero 格式化字符串错误漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. QNAP Systems QTS and QuTS hero have a format string error vulnerability that stems from a format stri...

Malicious code in eacfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af7a2232efa9655a28d7e875a3193e3e516863ec0ca7131bfa51ea1a51e0e734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11091 Malicious code in shopee-loading-report-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b027f729f23aeb1a25823e0830424ef01aa550f6b36a5c865d6ff296df077c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ls-upload-cmpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934d06728d09c5d22434ad0243a477298619e5f2656a37ef70b6b1c7abbacf98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-element-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01113947a4ee68f7ef0576560b8c2f606aa927e069fb821a064451615c2ac404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chokader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fc9188621dcf2d61381969b9398101544f623c98d339bc9e0cbca1bc00d0925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sss2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cfa752a5ead97e589945fc73774a2148ca64081dea5057c94d6b6ee2bf90e97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf9d5e311913d5fe92de7d7fb0dc219cd197a54b6433cc4b5420ed9b1190f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50358

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by authenticated users by restoring a tampered...

CVE-2024-50358

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by authenticated users by restoring a tampered...

Malicious code in neextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa353c92b36b03dd6bee3609d2fc838267b743c206a7e8152ee471fc7589093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elctrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89cc35724289a4220143414f7f4b8376381586c8a99e0bbf32b981c6403e048 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path

A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider...

Duplicate Advisory: Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5545-r4hg-rj4m. This link is maintained to preserve external references. Original Description A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file...

Malicious code in conibase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70af172c9db7c1934d326429c7bc63ed721d3934ada0d8197542fb231535fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bcoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f8b3904e1fbb296966df640e4cf438e617ed0abae2e9fe08cc2423c249d233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...