Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33c62d31d74de8fa6a7a3911507ce9a8d513bccb45ff1b51b7fbb9068920d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code.cloudflare.ajax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5869f17e67758b1fd6d47d84b2ab8d46f7912558ed8120de69bfc64ed5c0063d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-4213 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS and FortiProxy versions are affected, but specific versions are not provided in the highest-priority sources. Description: A cryptographic algorithm issue exists that could cause denial of service, device reboot, or an attack...

The vulnerability of the Java-based web application framework Apache Wicket, related to improper code generation management, allows attackers to gain unauthorized access to protected information, execute arbitrary code, and gain full control over the application.

The vulnerability of the Java-based web application framework Apache Wicket is related to improper code generation management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, and gain full contr...

MAL-2024-1492 Malicious code in @juiggitea/sint-quos-placeat-laudantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e056be5c4f584e4d96540ee53065c6e994cf69ec59714403edf96cc09d9d7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/officiis-unde-qui-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 102860266a10b155fb025a65808b77045f098ac9fb1d4630845fb81d55a4619b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1464 Malicious code in @juiggitea/officiis-unde-qui-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 102860266a10b155fb025a65808b77045f098ac9fb1d4630845fb81d55a4619b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nobis-reprehenderit-ipsa-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdf1847b5392d59bb960c0fb31fb98e4a834a084b91176f8938fea0b8bf99ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/molestias-quo-nihil-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9460ce6b7a5e9c2646ba5c2a4dff77162e5267b476b027f8fcd99d70eb18c156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1451 Malicious code in @juiggitea/molestias-eos-quae-saepe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95793c6a82675610530b27b5ea0fd91a1c9e8922ae81dbb320d6541522fcefcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/architecto-voluptas-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98cfb65f49141dbfeee3f067591407b316474e7b29c110ab5146a44c040cfca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b7f742e51b1f9267457dee789b8075b86508058e76c06bb532d89c9c8d5808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-4181

The CVE-2024-4181 issue affects llama_index (RunGptLLM class) version 0.9.47 used by RunGpt framework to connect to LLMs. Root cause: unsafe use of eval enabling a malicious or compromised LLM hosting provider to run arbitrary commands on a client machine. Impact statements in sources indicate th...

Malicious code in agencyportal-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f01ab5c8d151da175f79cd0379f0f4d714ddceb4075503d821ee2f05515d1cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914

CVE-2023-50914 is a local privilege escalation in GOG Galaxy (Beta) IPC between GalaxyClient.exe and GalaxyClientService.exe. From 2.0.67.2 through 2.0.71.2, an authenticated user can forge IPC packets via FixDirectoryPrivileges, altering the DACL of arbitrary system directories to grant Everyone...

Malicious code in pardonbeefconfession (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b81ea718272d3ee7ab9a60a488478726e2315992d23324f21ae8cee54bfc6709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96fd7c2ffaf602629b98fecc493fbe4ac073420940d2b37155e7ba170062e676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/turbo-octo-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd870e9a4b756cffdd1e5cfba86cd8edb34d34c9ca9467057155fc0e9b0d750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...