Malicious code in fca-tuong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d79cf7f0c8b529c853f6fad71dbc1ce8655d7f7356cf001fe8c6b5142ed7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in velor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dd8323c45be30eda6a4167c8e3799e4d598711e2568b55238dfea09e727326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meetingsdk-sample-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb53d02e988a276631d13cbb6486793e2858c3a6f266fb6601d395b5d6fd97d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco Duo Authentication Error Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication error vulnerability exists in Cisco Duo Two-Factor Authentication, which arises from incorrectly handling responses from Cisco Duo when the application is configured to...

CVE-2023-20199

A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypass secondary authentication and access an affected macOS device. This vulnerability is due to the incorrect handling of responses from Cisco Duo when the application is configur...

CVE-2023-20199: Improper Authentication

A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypass secondary authentication and access an affected macOS device. This vulnerability is due to the incorrect handling of responses from Cisco Duo when the application is configur...

The Swap action will always fail if the value of the deposited IBC asset is less than the value of autoSwapThreshold Canto

Lines of code Vulnerability details Impact The Swap action will always fail if the value of the deposited IBC asset the value of autoSwapThreshold Canto. This is not a bug, but it's very inconvenient for users and makes the goal of the onboarding module fail. Let's asssume that: 1 Canto = 0.1 USD...

CVE-2023-20199

A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypass secondary authentication and access an affected macOS device. This vulnerability is due to the incorrect handling of responses from Cisco Duo when the application is configur...

Malicious code in pesa-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35638e48d3366cc403349a519a4cfc7af6213a9eba4622bbeec1ee3e8ceb3449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Smart commit action do not respect user permission for Comment actions

h3. Summary When executing a smart commit for adding a comment as per Processing issues with Smart Commits|https://confluence.atlassian.com/jirasoftwareserver0904/processing-issues-with-smart-commits-1188765783.html, it is not failing even if the user does not have permission for the requested...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in prpostcss-loaderetty-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee67ba2a4127a635013cb8ab79bc1d748c3756aeb2271056f1a97d70a21d4b2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

Researchers have discovered an inexpensive attack technique that could be leveraged to brute-force fingerprints on smartphones to bypass user authentication and seize control of the devices. The approach, dubbed BrutePrint , bypasses limits put in place to counter failed biometric authentication...

Improper configuration in JBXBuybackDelegate can cause swaps to fail everytime

Lines of code Vulnerability details Impact Improperly configured direction of swap in JBXBuybackDelegate can cause the calls to swap tokens in Uniswap V3 pool to fail everytime. So if the ideal path is token swap over minting, swaps will fail and new project token will be minted instead Proof of...

Malicious code in theft-by-finding-diaries-1977-2002-by-david-sedaris-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f908f4ccc0a28c94802da4ab1792616bfdeb1f1c3f5faf766ee5390fd3f3d189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-love-letter-to-whiskey-by-kandi-steiner-on-iphone-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3543696adf399ee2a47ce791064b54f73b62253d59a299dd04ffd2cb1decae26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pucked-off-pucked-5-by-helena-hunting-on-audiobook-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b979714a561c451bcc357192abbc2aee479ab7c13fc449c8e9364bd1c70aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in origin-robert-langdon-5-by-dan-brown-on-kindle-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d3f3379219c0c91bda649e483a3cb9ddc9ff24363501116063b156bfddcb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Upgraded Q -> 2 from #882 [1683052821779]

Judge has assessed an item in Issue 882 as 2 risk. The relevant finding follows: In function buy and sell if one royalty recipients reverts whole transaction will fail --- The text was updated successfully, but these errors were encountered: All reactions...