Malicious code in apitelegraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a634fa568ff42edf6105be25c73b2ab0f1f9dd3413865cb85a5ca04f6c46981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hk_780_usb_dental_camera_driver_ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d45a01a85d2757d5c44a11ec7dd5ed58af593ed07b79de8fafd1ce5528ae19d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apitelegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea07ce89558075f0ae14ec35b104be366b715ccc70f4308cf8a6d8ec4e193638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2021-45464

kvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci.c. This allows a guest OS user to execute arbitrary code on the host machine...

PT-2023-12558

Name of the Vulnerable Software and Affected Versions kvmtool versions through 39181fc Description The issue allows a guest OS user to execute arbitrary code on the host machine due to an out-of-bounds write related to virtio/balloon.c and virtio/pci.c. Recommendations For versions through 39181f...

Malicious code in usaa-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8473436367d09c53aaf17637b278bfba50b5d72473cb36c7a01e7029216463d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clientcore-onesrv-serviceclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e5e4f399b5f583c06f69a74d76eb6600039d400dd1e2e7d7d721e1aa2cbb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2017-8905

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215...

SUSE CVE-2018-7550

The loadmultiboot function in hw/i386/multiboot.c in Quick Emulator aka QEMU allows local guest OS users to execute arbitrary code on the QEMU host via a mhloadendaddr value greater than mhbssendaddr, which triggers an out-of-bounds read or write memory access...

Malicious code in mdes_digital_enablement_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef91fec71d700626e729317e9beb9132a1be4c4c60fce5f67f94ceae1a198435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jiser-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bfdae86299688abf534339a424e1a455f436fbdef00a64a09648d3c31862c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jiser-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd3e25c3ee0d6a560720ad7cafed6839f4aee3894b4cdcc4514631dd6fa4b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in statbox-bindings2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acef1c426ea3f43828e9f72af1dd58207590a95d765a1e62cc31a9904263e7d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ftx.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5135d751992b5d4c6a940cfaf74fe516bcb12b50bdcb801313933da407c5a33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep_conf_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f17540f057215075d86afa66455fa1f138a3e04be90742219ba083ffdb95f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chokidar-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d0941cc4b091bf564e0ab4d983c6bac04faa8bd0b1402c10518a993c62dc682 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-43519

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

PT-2023-14233 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.2.1.40179 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.1.4.40436 and below Aruba EdgeConnect Enterprise Orchestrator versions 9.0.7.40110 and below Aruba EdgeConnect...