Malicious code in @juiggitea/officiis-perferendis-ab-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711ca6e76bb5bf74420ee6016bb52bb5a3a35528a68961286e6d73de60662243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/distinctio-tempora-quos-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e117b447f3dec0b0269d05cfea94ff028b4f8d24d17e0d3edf4eb62a9c801e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

The following Rapid7 team members contributed to this blog: Ipek Solak, Thomas Elkins, Evan McCann, Matthew Smith, Jake McMahon, Tyler McGraw, Ryan Emmons, Stephen Fewer, and John Fenninger Overview Justice AV Solutions JAVS is a U.S.-based company specializing in digital audio-visual recording...

Malicious code in lamia471 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b6a082a9defb6d9d2265cf9e9dee0b5e0382c8afda6772a4ee2248d142303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Electrolink FM/DAB/TV Transmitter 安全漏洞

The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that stems from the presence of an authentication bypass vulnerability. An attacker can set any value other than NO to a login cookie and ha...

Malicious code in @lbnqduy11805/silver-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48fa3414b1fc4238faa198d07d0f7a8e656a706a83fae508bac516436f6860fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/studious-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be405b7389972c1c848ccf1ee4a873140a945c75e3593de98642061da7d5520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-app-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab44e75760c84102aeb55e53e2c77bb85fc0839e0873eb6dc778f14756e0bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24578 RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution RCE vulnerability, caused by multiple issues within the Java based HMIPServer.jar component...

Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nice Linear eMerge E3-Series

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Nice Equipment : Linear eMerge E3-Series Vulnerabilities : Path traversal, Cross-site scripting, OS command injection, Unrestricted Upload of File with...

[SECURITY] Fedora 39 Update: qemu-8.1.3-3.fc39

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myonlife1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc91fc3e9b6953561e82f58838788f833d660729577e1cab84bd0cdc265aeb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbc9fc9b7466695fd0436db942075f375169991c1c48a2c800130ad25e1fff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e20d7791f6d48303630a98a99136a6291477da487e84b0fa772d70d69f762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ab5bd305b25a413977dbbbb70fb09f9b2e8d26979296a513da4d46b2dab0467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d98e754b174d098f797e71e1b5ac1f5ab7424a032b1c1c0a6ea0e2ba3be7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-362 Malicious code in wlwz-2312-2103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c710f049b6e6ab6ec75dc0bb6938539f31296e371618290e060aa41b12992f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...