Malicious code in djstream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8acfe36ea337cdce9e0365d0739a5a8c5d6e0d443e6e62917279f04cd96fe81d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rocky Linux 9 : libtiff (RLSA-2023:0302)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0302 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtif...

CVE-2023-4154: Out-of-bounds Write

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users possessing the GETCHANGES right to access all attributes, including sensitive...

Malicious code in tst-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2033e787504d86b9c1f6d2daf7a33c85b76d469c02750192e284c092fd69059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-40445: Improperly Implemented Security Check for Standard

The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persistently fail to lock...

Malicious code in pragmaticplay-situs-slot-online-banyak-hoki-paling-terpercaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0bb9559484405e38427ba29fe4572ce1df42fa5a9932f8f785d2ed5295f3240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

Amazon Prime email scammer snatches defeat from the jaws of victory

More often than not, its our solemn duty on this site to keep you informed about the nature and tactics of dangerous, cunnning, and persistent cybercriminals. This is not one of those days. In fact, this is the oppposite of one of those days. This is about a passable spam email sent by a spammer...

Malicious code in mariss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fedc08d9c32eb49c4500f9cb36ee2670f9c8ccd0491f6246e45c93fc8619a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component---src-pages-corporate-delegate-packages-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94743768fa45d297822cb222b29ce23ca1ef1e8fbbc617de5e13df7b8fc60700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in terminal-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc720bba161c938dd6d8b8b6a31e573db548b9243985c5462dda2dc486732527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starcoffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21d2d2d622bacbbb48186877f4de201e3ef7466ac586b34502e7df3b1dfc5e37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ktarco1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e3f2253e55d0e67c351fbfa882017f51f5575f1488573afd9ee2b83e277be23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-get (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e0a51fdb1bf06bf1cf80981823698ed77398aeef31127fbab3fcfb0a3f2e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-bot-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a11398483bdb1e63dc33177aba0b472a6fba5ea548f7e7bea526beb89f23551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476ca9163b9976a64e9b1596fb739c8dc2c4725cd2f321d998e6da3cf072e3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sentrybrowser5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd057b6a781a16b9ccd0cbb9960c5fef29f51b3587235e4cfa30fe7318958169 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beta-fhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-25586

A flaw was found in Binutils. A logic fail in the bfdinitsectiondecompressstatus function may lead to the use of an uninitialized variable that can cause a crash and local denial of service...

CVE-2023-25586

CVE-2023-25586 affects Binutils: a logic fail in bfd_init_section_decompress_status may use an uninitialized variable, causing a crash and local denial of service. Connected advisories confirm a fixed Binutils version; upstream advisories (e.g., TencentOS/FreeBSD entries) indicate a newer Binutil...