Malicious code in basic-preset-minting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33b65f9b8e24a04584f5798fc805e84fb63d5891a9b9db633e13c05d4db2feb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11149 Malicious code in noirxnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb5c01486942b32fea497d1b731b1d73ca00dbbcd6b588f8065e24b128b5805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noirxnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb5c01486942b32fea497d1b731b1d73ca00dbbcd6b588f8065e24b128b5805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11152 Malicious code in randompathlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c6130d1739fac45df45a04aad9725b130073eb91f6d7801254242cac74edae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11969

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

MAL-2024-11125 Malicious code in wx-pocdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14db1a8cc86e2cb9a45dc7eb659c498497224b3646918bfbfcf27f6bb34bd39a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b68c2b24c603c8d9041a3cd7aeefed0ea836500df679a24bc061241fec376a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pb-ts-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9b35837a3cf72fbba62ab3098ec2b11f3a3532e261421c03538399d5f64751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toast-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a339deff592f10f6ee1b2fa1d7881b787ed15a4713255009f176acd8088f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spid-growth-notifier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda56c0e08a98c9eabbe82bae2f3b70c122216d4ba4c53b799179a04061beedd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jira-rest-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a751e385f80e321ca141ec6b1c0e58806c44bedb38b880cc1af3cb133b3c37e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rootkitfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f464c06e5146e96a9feed234e30390194912e24838433cad3daab70ecb350b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plaid-tiny-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6583cf366a5d9b2b4b3e8aaf4960a74b8fcc1224d6d862a5947ee56570dc252 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-47533

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

GHSA-M26C-FCGH-CP6H cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Summary utils.getsharedsecret always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes. Details utils.py getsharedsecret: def getsharedsecret - Unionstr, int: """ The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree o...

CVE-2024-47533 Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

Cobbler 授权问题漏洞

Cobbler is an open source network installation server suite from Cobbler, which is used to quickly set up Linux network installation environments. An authorization issue vulnerability exists in Cobbler versions 3.0.0 through 3.2.3 and prior to 3.3.7 that stems from improper authentication,...

Malicious code in seller-webchat-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c08c36430d0f111cf5379d4566cc13f5b904dbfcb91a51e28ae64199874c5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...