Malicious code in osm-legal-speed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efce0e1706c67e16298e03b91dcd0069873eae6922136c002862891d7579ffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10396 Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10387 Malicious code in daun124wdsa8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4f8181241d0605faadd7a9698324defcd845577c94f3553a344c8d1b9888b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-51744

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

MAL-2024-10343 Malicious code in puppeteer-html2pd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 324b6f4d6c08f662554d6714a4806dfcf894570a51344933cfefdb55250b778c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10344 Malicious code in puppeteer-req-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10348 Malicious code in puppeteerrecordr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fa60fc847aad89edf3e0b1a08fb616a974e04d1623735955408437bdb25e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10347 Malicious code in puppeteerpluginstealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a636c907637d75c99aadbb0e09e1e5e675cb6322277962a5d3b2a75622e0d3e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10278 Malicious code in req-bans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891a9d8d6df58ad3743a6ec2db7217d78ec1fe0a3d8bb938181ec4ac26ee5489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10276 Malicious code in princedevmd1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5e6c2e25296a36f3923783f37ad2d8bc6e4ee785afcd14f29978aecbd8e54c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10262 Malicious code in herthtrhrt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d290b1abea443c12835d59d67a6cb023281325c39123663ccd29e66d3944d6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10246 Malicious code in ing-friam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505446a4e65d22ebe822726b54fe16f30ada8b63c354fd2a0a976381d7323e82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Clean Retina Theme <= 3.0.6 is vulnerable to Local File Inclusion

Software Clean Retina Type Theme Vulnerable versions = 3.0.6 Fixed in 3.0.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-50436 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID e56d05b5bd53 Credits tahu.datar Required privilege Unauthenticate...

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

On Wednesday, October 23, 2024, security company Fortinet published an advisory on CVE-2024-47575, a critical zero-day vulnerability affecting their FortiManager network management solution. The vulnerability arises from a missing authentication for a critical function CWE-306 in the FortiManager...

MAL-2024-9368 Malicious code in fuh0qz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7529bc6b4e017a1268dff08f21236c040484c75d1c87e3bbe413b7c1afea0ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9395 Malicious code in w3jp6x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d73fff393799245c490e4d428b124f043cffc6ee705362ab6c903d2a09e9c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9346 Malicious code in dhwmfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7732d14f5f18b93b76e0b9164667441919050e960414ac343c60a460854803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9317 Malicious code in 8ng20w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b86d887f2afb2a015165a69ce12df9c8e62083c1b2368bd4045edb72417b6ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9338 Malicious code in ava-ilable-down-load-mp3-today-illuminated-people-pwjfd-buzpyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f7ed6d741d62c3d245d21febdfd0058e2857c4f3016aec9c3f13dc25c9b2a46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9343 Malicious code in avail-able-albu-m-down-load-37035-boom-chicka-boom-bk3mq-llyzsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2797f58177b66d9be1500b40bd7b910b50660e07b0b4b73780746fcfcf57b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...