PT-2024-23626 · Unknown · Plug&Track Sensor Net Connect V2

Name of the Vulnerable Software and Affected Versions: Plug&Track Sensor Net Connect V2 version 2.24 Description: A Cross-Site Request Forgery CSRF issue can be exploited by remote attackers to perform state-changing operations with administrative privileges. This is done by luring authenticated...

MAL-2024-7847 Malicious code in ent-widget-citizenship (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf62b2434507ed956589c6ccdb8a0361e0f7711f7625eb142f7d046a2dfc20d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7805 Malicious code in httpsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2e3678fb0fcd1e38fa8e38b706128b14d6cd88892b5d2eace1580f584baa8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7799 Malicious code in smart-input-textarea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffba47b31768b1363d5fd651769eb8bcb3f1112ca6db601bd51c7c44ec58adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7785 Malicious code in sap-abort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e2bde6bdff35f1e9b3c13cc8e0202b7b2b76d1390e81fc3ea3d484340f5f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7770 Malicious code in mock_simple_module_relative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5314a68f10a03af92b308ae221d15aa143a97ae197cf96c655476db5638a084b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7753 Malicious code in jfrog-jfconfig-grpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177a2d1912b1051b4347d51ff6410db1077d40c3cd21468d673acef023e3e1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-30699 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, where the function adjust jmp off incorrectly used the insn-imm field for all overflow checks. This is incorrect because it should only be done for...

MAL-2024-7705 Malicious code in flammerxdjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b6b80199d2f6500f4b47a77309fa995e34a633ea2fa5f5e265d0b1ffb7b085 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7719 Malicious code in stylesnox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231ba61276a9baae8583e87d40a97b7ee4c4dff960555a6df856c57ed2adff0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7475 Malicious code in stylishhteks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7ae115a3f473013d0ef082a8248081b7ba44388a767650b9cf36ff622e657b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7454 Malicious code in kimakq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c68362e508749ab3e543eec3f10a706a187583904a87ca0f48afaa95c608a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7457 Malicious code in kurxjy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd35d272c3dff6b054100efada55b4fa40fb7356dee1daa1235fd9bda23b871e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7440 Malicious code in ali-in-wlnd-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d89d3dbaa5fb0db4821d7bddc99121add0aec27e506f275ad018fb0c0608af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

CVE-2024-6605

CVE-2024-6605 affects Firefox for Android, where an immediate interaction with permission prompts can enable tapjacking. The description in sources states Firefox Android

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from an elevation of privilege vulnerability that is caused by an immediate interaction with a privilege prompt. An attacker can exploit the vulnerability to gain...

MAL-2024-7432 Malicious code in uppgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eebd3367058aab97ddda392851ad10b2d7c94cce6268e0be365b5aa83069eb1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7407 Malicious code in @zitterorg/vitae-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d396ac39fe415b823f8b908a69652a99cf9bc80b5f035f6c2a844a8d8686b328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...