MAL-2024-10503 Malicious code in eth-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ea1a7c96683b60d54de7b649e94461921dec57d5df019d8764439db87971ab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10532 Malicious code in web3tokn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf19186126f7c85de9d64c25ec0b7d27ccb4878ecef2f9860efbe7614287773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10440 Malicious code in wb-eth3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2061eab14aeb54b59ae68e0b58b1b8ae77a9a9a252407ae77eab392c71ef9c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10441 Malicious code in wb3-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5911c19ddad04766063cf6b5a3e8017706df6574b0c4886475a5af3c1a8c65cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10432 Malicious code in ganach-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d3e3f61f335dc7d34337825d521731cfa9030c28efb0b1dc3c13cba719d89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10436 Malicious code in puppeteerwweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb0748b32f74311c6685d9f83b7f96d02b87da7abe76eddbf2f3d787179eb97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osm-legal-speed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efce0e1706c67e16298e03b91dcd0069873eae6922136c002862891d7579ffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10396 Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10387 Malicious code in daun124wdsa8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4f8181241d0605faadd7a9698324defcd845577c94f3553a344c8d1b9888b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-51744

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

MAL-2024-10343 Malicious code in puppeteer-html2pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 324b6f4d6c08f662554d6714a4806dfcf894570a51344933cfefdb55250b778c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10344 Malicious code in puppeteer-req-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10348 Malicious code in puppeteerrecordr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fa60fc847aad89edf3e0b1a08fb616a974e04d1623735955408437bdb25e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10347 Malicious code in puppeteerpluginstealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a636c907637d75c99aadbb0e09e1e5e675cb6322277962a5d3b2a75622e0d3e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10278 Malicious code in req-bans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10276 Malicious code in princedevmd1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5e6c2e25296a36f3923783f37ad2d8bc6e4ee785afcd14f29978aecbd8e54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10262 Malicious code in herthtrhrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d290b1abea443c12835d59d67a6cb023281325c39123663ccd29e66d3944d6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10246 Malicious code in ing-friam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505446a4e65d22ebe822726b54fe16f30ada8b63c354fd2a0a976381d7323e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Clean Retina Theme <= 3.0.6 is vulnerable to Local File Inclusion

Software Clean Retina Type Theme Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-50436 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID e56d05b5bd53 Credits tahu.datar Required privilege Unauthenticate...

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...