SUSE CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

MAL-2023-534 Malicious code in jiser-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd3e25c3ee0d6a560720ad7cafed6839f4aee3894b4cdcc4514631dd6fa4b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-827 Malicious code in synthetic-jiser-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321d9dba211cbd5bc6fca060c3ac8011e47fc368c530ce63d5647d9a1ea5672c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RCE by Server Side Template Injection

Description Hi, During my testing, I discovered that it is possible to inject code into the system through the "first name" field. This vulnerability allows for server-side template injection, which can lead to arbitrary code execution. The impact of this vulnerability is potentially significant...

MAL-2023-59 Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-61 Malicious code in @superbet-group/web.lib.flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 852821ee1ad9212bdcbbf1a16f7a0cd05db090379051a9725aecaf33a24e703d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-928 Malicious code in usamaturk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e085b7e1bf5f066d6026022820b7b037a92d4bd22cac93050d8657882b7a9e10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-884 Malicious code in thenamk3zg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52bcaf8a754f24d5679cb567cca3c9c6ab028ac369266cacf4ca6d4494f5c27b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-95 Malicious code in angular-portal-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d52cb1a168b0e9a95128e2cb22f54bf039750753cedc3fbb1012b1d968ad117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-121 Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-328 Malicious code in fc-account-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2a2b9137afe6979e5b25e3e2aba4da1a9152feee7e21f1fc61c909273642d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-858 Malicious code in testneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5bc4adbdc90c94de1d80650508a0952b81e7cac9c2d2307982fb42be7eea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-197 Malicious code in codeceptjs-browserstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 803e944b4406063368c8940d7f34221d26b1855be2d200abb731f20d97def026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-783 Malicious code in solc-0.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb2ef4de1156c7094d66ff9e85b4e9b17b04b11eb2348040a1f7c8756c7b0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Xss in compose mail functionaility

Description Reflected cross-site scripting or XSS arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way. Proof of Concept - Step1: login as normal user. - step2: click on webmail and click on compose. - step3: now enter "...

MAL-2023-287 Malicious code in dpcf-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff0ca3f36919d30bca5c57b0c42fd6bb21fe6d7bf5370806a538d228a691f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-423 Malicious code in fca-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 485827dec64675d8b8c4a64d0bf306ead2d7150e75029c3eabde32bf47800999 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-321 Malicious code in express-http-langdetect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c2e7abc09e3d84a919cf1e1214a8510e0ebb9084e43566dd531dfeb53803e36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-979 Malicious code in yabox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ab13857c561d1c69db1fcb1c770817f9fa784ec2e34baf91b0b9b915a70f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-990 Malicious code in yandex-sendlinksms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33f280c3a000e1320bbd63fa8405b2dce27f6e488ae3557bb02a19394f76bdc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...