CVE-2024-8456

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices...

CVE-2024-8456 PLANET Technology switch devices - Missing Authentication for multiple HTTP routes

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices...

PLANET switch devices 访问控制错误漏洞

PLANET switch devices are a series of switch devices from PLANET Corporation in China. An access control error vulnerability exists in PLANET switch devices, which stems from a lack of proper access control for the firmware upload and download functions, allowing an unauthenticated, remote attack...

CVE-2024-6983

CVE-2024-6983 affects mudler/localai v2.17.1. The backend accepts inputs beyond the configuration file, enabling an attacker to upload a binary and execute code, potentially gaining full system control. Public reports in connected sources confirm this RCE vector and cite the vulnerable version as...

MAL-2024-9013 Malicious code in multiple-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4233e3b39779d62d23e578c4ceb25ff5a78a6f0285b709b91ef0cf36ed7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ml-translate-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fac763b65f8589de08fd31594652182e22966151af04e82dc7605d936b3189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8917 Malicious code in ibm-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d299d0b8d9bf7cc9c318e385566c4f1c9c972374224f38ac12d8fb90612dbdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in temp928546 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ce0eef84654ac11c5ab26063df541ecb6b38f4ee9d29996ad53f8af13363339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passports-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f07e6135ed2ddf89c87508abbc5a583e3ae22a8ae354dfd915c99471e01dbbd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in publish-test-result-screenshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf2cd13f851593ee5dc61c5c17c22a1efa0d43ec11f32023e7dfecfdd1c76adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TOTOLINK AC1200 操作系统命令注入漏洞

The TOTOLINK AC1200 T8 is a wireless router that supports dual-band Wi-Fi at 1200Mbps rate for home or small office scenarios. The TOTOLINK AC1200 T8 suffers from an OS command injection vulnerability located in the /cgi-bin/cstecgi.cgi file, where the slaveIpList parameter is not validated with...

Malicious code in hwpoepr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a002fd18d59f61bbe4732ac672a1deff9f0ba2f80a77258d0b25922390c3695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owpirre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9004cdaff2d36176f75aba90f4b13449b5582bd4ae4eda6a3af3ed375bea236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in enews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455047e17152ce661e1611aecff299b20099e60990c7ae4f64beda90ec307799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wekan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364accf2b084493722b67d10a835ba3f2ac5a70cb79038e1bdad1f6fb1bf71cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8167 Malicious code in @diotoborg/autem-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239c77c66f6ccb8f7dcbcbd73746657981045cbd106678133760ac1a486b680c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-unde-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942e5401c00bc27645c2f6fc248331eb29ae92490f6ec1ebc42518056f9d3aa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8221 Malicious code in @diotoborg/deserunt-cupiditate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5067c2a606fd1d7c35823921dd7c49a2d5f3e82c41760a4cdad3ffb84bb85c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...