CVE-2024-6983 Remote Code Execution in mudler/localai

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the...

CVE-2024-6983 Remote Code Execution in mudler/localai

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Dover Fueling Solutions DFS Equipment : ProGauge MAGLINK LX CONSOLE Vulnerabilities : Command Injection, Improper Privilege Management, Use of Hard-coded Password, Cross-site Scripting,...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

MAL-2024-8768 Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zuwortr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a6fc476831f5d1665908a5e68c190efe201ca54e85255b4572f2fd10ca6c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in intl.walmart.cca.webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663678906f8c3cc94e69d26183d0757c295a9f04195749cd05c3260b980db1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcoin-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74442949ce3a767cf9c14049b9366b2e803d270991e37e5e2ab09131131a488a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/incidunt-quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53c38ec99f63ebcd9a1bb587c921c274519557d23228056e69875fb7a3e5cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/labore-inventore-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef1c0726be258c93a40ad59209bb0af007a6d61c3f47723c61abccab0ec6d2c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/voluptatum-repellendus-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7f274ec7d84edbc659375bd76d04ca0ae86c9b86aad3e5fec70d70b6200943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consectetur-modi-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1907468f6304624269b2f29ee47460db951abb848af9ab72ed7f3230ee2bf3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quod-similique-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfacda54c4e260f73c671cefedd4ba06cfc06fc063a800ab5e73fe566d73baf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/soluta-cupiditate-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b21f96243ce0fb98c33fe72951c197f7c20bfdd8c7d82fe06f7814fbca47c3c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/temporibus-neque-quasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04ba8080b84de0bd9ff231944a90bc9fb18395f9692a0d75f703500c219aa09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/culpa-amet-totam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069f5d0b0fb54905826d7f1872068ba8c49399e3bfee4fad0aba051c1d655215 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/incidunt-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be938d477b0082316595864f1dc75d1739052eb873a4eaa7577997c08e99c28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/itaque-aliquid-quisquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec7b0a453c2f81482a3166a48bc4a3f17f238b0dfcf838ea2e21ee27aaaf91e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/minus-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2780a783b10221c66f3fa570288200f7c0dd476fec9b6cd6e2f3bfc6ca8d47d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/sequi-perspiciatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79c33db542bfb7cf59b7a36d121fa3622f23e0c17f9662d78f828538bf03246 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...