Malicious code in toast-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a339deff592f10f6ee1b2fa1d7881b787ed15a4713255009f176acd8088f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spid-growth-notifier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda56c0e08a98c9eabbe82bae2f3b70c122216d4ba4c53b799179a04061beedd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jira-rest-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a751e385f80e321ca141ec6b1c0e58806c44bedb38b880cc1af3cb133b3c37e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rootkitfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f464c06e5146e96a9feed234e30390194912e24838433cad3daab70ecb350b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plaid-tiny-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6583cf366a5d9b2b4b3e8aaf4960a74b8fcc1224d6d862a5947ee56570dc252 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-47533

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

GHSA-M26C-FCGH-CP6H cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Summary utils.getsharedsecret always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes. Details utils.py getsharedsecret: def getsharedsecret - Unionstr, int: """ The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree o...

CVE-2024-47533 Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

Cobbler 授权问题漏洞

Cobbler is an open source network installation server suite from Cobbler, which is used to quickly set up Linux network installation environments. An authorization issue vulnerability exists in Cobbler versions 3.0.0 through 3.2.3 and prior to 3.3.7 that stems from improper authentication,...

Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prxy-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ba7e4f495217937a8213c982cd27fd211680e174266b6ae21aa6c24beaebf20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agn-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87afdc0a8e30ae8eebb05c2e6a137747bf63e1873c568c2b6ffc898507bd7b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

Malicious code in docker-centos-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71090e29427fee974fae520d89e3e7df61c45f9cb63241c5b187c8cf5fd63556 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bigto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0078b9287cd6f2a8be0150a77862f7e8633d8f3dcf99ce31d4273fcb7b0987b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ac1d6271bf68f9476a6f0a9e4df3a4764f5a06405e90fcac87968f2a9608d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...