Malicious code in f0-authorizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b198073a3c6c8c48eaa78a60790eebe24d1bce34d24bdcbba4e0f077f329c56b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-priyansh3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd0e5c080a7eaaffbca2eaab0a8d833f9f08cb3b4a122235e6d1c61adb46a0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fbthinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8a9968da7e6b0c165c9ac85f48d26f19e61a94db854c36fe618159e95cbf34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gradient-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7856f4d5db8c9074c3633d2d5a61782c18536a58a84cb8ad56ae029525880875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43634 Config Partition Not Protected by Measured Boot

When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous project, CYMOTIVE found that the configuration is not protected by the secure boot, and in response Zededa implemented measurements on the config partition that was mapped to PCR 13. I...

Malicious code in @zettle-bo/staff-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6890c2d23d73e43eaf40b3d6435083b993f77894876b67b4a2ea41c9a223f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0773

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerabili...

Malicious code in @cat-abdulla/fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6756f1d86478050a5d2c651a1ef83e1f151c21b753785868a0beac0d401b3ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc057d5c15cbb841971a77ec214defaaa36bdd16dccbba8fdd162bcc41e26b6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f4752df8304622adf069f9684bf8006f25e596ce72432257c6a779453f7f008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8151 Malicious code in telia-front-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915e7468494f50f3f273a20457aa01b3aec6e0f5cae88024b0db7ec5246c32aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20230911-07

A vulnerability in the Moodle virtual learning environment is related to insufficient validation of user input data. data, an attacker could send a specially crafted HTTP request and make the application initiate requests to arbitrary systems. Exploitation of the vulnerability could allow an...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

Design/Logic Flaw

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

Design/Logic Flaw

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

Malicious code in solidity-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adef035708c56e9f6cce417f26ec5967eaf0a0e639c18e8c140d6e92ffdaef9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8074 Malicious code in newtesttocheckscanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ab43db32f51d45b83fb229cf4e2084b90f91beafb1a99342651c5693073ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...