Malicious code in nlzvbcyqseakmxoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d99b33a4b248b5c921bdda4acd8b284282da06ba8369a1896620dc4ec016f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tkruafxisbjmogek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a4366a913f15805ff27cd31737971e935afa62ea142221a0c63cbf507d8dcda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wqhkjmnfyegalzdp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33e5cc162fed20152e435c99988ee7d7ce757a3ce31b8d4aa0861eb9157f5f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acbjoiruyezfkqmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385312aeb2ac754cce829cff9beef1554f284165ecb16843695343ff4e735bd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aygpimbotnhfxulv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4983578ac318392a4f4280548eabb9c5b7d37a21c5ac3f58b59c95d9c13b5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ixtskfghuraoebwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29d3e4999325a08758d0cb86540e7d9f8a82fc0b97e6b85fedbe621b5a61a8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ifapbuxwnmzrqyov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f07256c3d599ad67e66633d4a4bab3bb5af05b40989ddaccceb6c59c5df764bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in msdqlkkuajnbihez (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aeacf1497303c1586b0be133f6faf50930ff96cbe270d3b263f13aa29905cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rqndoxabkthupgik (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290958d87c28f941f8048a2948119d11fb2fc068c1948c4ba2ccf2df5c25c84f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vkchtoewspkjrfld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9714a5dfba8b824c7635de9bfed3a9d446315111e7d60dc0355c94a09ea3e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-aaa-yyyy-zzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82a8db0c5e785c986ea5b9583db6e09eba775fdd750a344cedfb5982bc3fb3ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roar-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeaacbda79e7c5ad19617406b51e22bb02a81c23eed3c203b2214bf4b255f92e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Dept Of Defense: RXSS on █████████

Description: the WhatSubmitted parameter not filtered, i can insert " character and execute code JS Impact Perform any action within the application that the user can perform. View any information that the user is able to view. Modify any information that the user is able to modify. Initiate...

Moderate: Red Hat Security Advisory: Satellite 6.11 Release

An update is now available for Red Hat Satellite 6.11 Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: libsolv: Heap-based buff...

Satellite 6.11 Release

An update is available for libdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Satellite is a systems management tool for...

RLSA-2022:5498 Moderate: Satellite 6.11 Release

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: libsolv: Heap-based buffer overflow in testcasere...

U.S. Dept Of Defense: SSRF ACCESS AWS METADATA - █████

Hi Security Team, Based on https://hackerone.com/hack-us-h1c challenge, I have urgent vulnerability and the challenge doesn't accept reprots for now 1:56 AM . I have found a SSRF Vulnerability which allow access to the AWS metadata, using Parameter ?url= as shown blew An attacker can tunnel into...

[SECURITY] Fedora 36 Update: meg-0.2.4-6.fc36

Fetch many paths for many hosts without killing the hosts...

Incorrect Authorization

Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Incorrect Authorization. Go Vulnerability Report: The url.Parse function accepts URLs with malformed hosts, such that the Host field can have arbitrary suffixes that appear in...

Yokogawa STARDOM

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely Vendor: Yokogawa Equipment: STARDOM Vulnerabilities: Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials CISA is aware of a public report known as, “OT:ICEFALL,” which details vulnerabilities found in...