Malicious code in sdk-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03dafa3e57d86169a6645da2a922b01ee1da954a3b98e6cf5c31c63575cdd133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notrealpackage-blac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73568a8a9ef3dda38a3e5c29930a0e64d1cc37f21e1cb90f77328c71f83604fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in papercut-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7136f3baafe0f0e034503c19de9df0b9dcbb5c556c1ad38c56fb8e01b82d08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9142

External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...

CVE-2024-9142

External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...

CVE-2024-9142 Local File Inclusion (LFI) in Olgu Computer Systems' e-Belediye

External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...

CVE-2024-9142 Local File Inclusion (LFI) in Olgu Computer Systems' e-Belediye

External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...

CVE-2024-9142

CVE-2024-9142 affects Olgu Computer Systems’ e-Belediye prior to version 2.0.642. The root cause is incorrect permission assignment for a critical resource, enabling external control of file name or path and allowing manipulation of web input to file system calls. According to connected sources, ...

MAL-2024-8926 Malicious code in pring-payment-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3eed32902e1265a8b45d6189699734582790383eb848542f28396763e05ca31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8901 Malicious code in evm-oracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c91e468e1cf1503476c51feda4ab0bfb701bc195a5b682801c9182256704b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Nomad application orchestrators, related to improper external control of the file name or path during data loading, allows attackers to create archives that unpack files according to paths outside the expected distribution directory.

The vulnerability of Nomad application orchestrators is related to incorrect external management of filenames or file paths during data loading. Exploiting this vulnerability allows an attacker to create a archive that unpacks files using paths outside the expected distribution directory...

CVE-2024-8754 External Control of Critical State Data in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to squat on accounts via linking arbitrary unclaimed provider identities when JWT authentication is...

Malicious code in evolution-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 319dd750e62370dfbc8bfdc0a3a2abcf5492d5a599b1a6c67a08ac126170df8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwieuor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2cbc673e05c4390b6cd2ec1907ab9c70242a26d924f3c307cb19e894d99ec5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/voluptas-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb2634112356d45f74f3822a4964ae5b2dc5c5061c240df9b26b835f34b06ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quod-similique-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfacda54c4e260f73c671cefedd4ba06cfc06fc063a800ab5e73fe566d73baf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/molestiae-perferendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e60b07d695b1fcd09ec10b96688104dfd5cc8941dc7e2f2405a330c16f28f5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/incidunt-odio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5286c9fb5698bb87e2bd6bc31058c902bf0323a0d70d926986b5c5eb0a7748c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/minus-alias-quisquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb0692a30fed5b3b431b67815284bc2530a34430a8dd04267f6a8bc3b5c08af6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/officia-labore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265ae1d962fb5f3a65be2a3fa5be19458ada059dc3595364f339fe68292b810b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...