5024 matches found
MAL-2024-7257 Malicious code in @zitterorg/libero-exercitationem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1d89913dcaedc010cba94e887a384951795bd1cc057378cdcb2effbeaaeab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7290 Malicious code in @zitterorg/neque-repellendus-ut (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec87cc7ee6ba396ae9f496f030469560b6cb402aa4a4f55382373c175ad4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7190 Malicious code in @zitterorg/eligendi-eligendi-deserunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee455451d12c9731c009804311dabd115e95ab9cdc9e544d918a5b5af078cd85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @zitterorg/neque-veritatis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9761c5a4b9900ee7e416481b60fe6f740ef64e181e6b5292f4f64de71f4bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7136 Malicious code in @zitterorg/consequuntur-doloremque-ducimus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bde58c05fde83a87cafe69243f3083cd970309eae6d651d07cf8113d834412c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7277 Malicious code in @zitterorg/modi-quaerat-voluptas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e570cdd025b0f55289e14f0be98011189b566e90522f177134e3f7c92290e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7369 Malicious code in @zitterorg/repellendus-ducimus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c107ede46e319fb0c1f9d0133b1cbe3e2d88caf4c286a24b84b913b5f0663ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7109 Malicious code in @zitterorg/adipisci-dolore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6263b7deedf98d441a291418f6f8d1e7b127c73b15d8cd172f7fdcfed1edb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-WM9W-RJJ3-J356 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-9PHM-FM57-RHG8 vulnerabilities
Vulnerabilities for packages: hugo, hugo-extended, ollama...
GHSA-XFX3-CR74-X3CV vulnerabilities
Vulnerabilities for packages: jenkins...
Malicious code in prod-env-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dee9821e42ac2a6df6446591543bd29ca9bbd5e481a72b12216b40a16bbefc62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
XWiki < 15.0 Incorrect Authorization Vulnerability (GHSA-qcj3-wpgm-qpxh)
Xwiki is prone to a incorrect authorization vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
Exploit for SQL Injection in Opencart
CVE-2024-21514 PoC and Bulk Scanner !Bannerscreens/screen...
Exploit for Code Injection in Xwiki
CVE-2024-31982 PoC and Bulk Scanner !Bannerscreens/scree...
Nextcloud Server < 25.0.13.7, 26.x < 26.0.13, 27.x < 27.1.8, 28.x < 28.0.4 Improper Access Control Vulnerability (GHSA-xwgx-f37p-xh8c)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nextcloud Server < 23.0.12.17, 24.x < 24.0.12.13, 25.x < 25.0.13.8, 26.x < 26.0.13, 27.x < 27.1.8, 28.x < 28.0.4 Improper Access control Vulnerability (GHSA-jjm3-j9xh-5xmq)
Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SUSE-SU-2024:1486-2 Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...
Malicious code in rb-fare-breakup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a5d54730dc9f0fde2c00fc22012602258fa2002141d77e8c09f61347a82e33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...