MAL-2024-1042 Malicious code in frd-rsa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8787b5e0e6583bf27e7ad1a0f2da3d1fc03021fa9a8957e681cc9c79c0f6acd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Socialdriver Theme < 2024 is vulnerable to Cross Site Scripting (XSS)

Software Socialdriver Type Theme Vulnerable versions 2024 Fixed in 2024 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-4826 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b8a90a1f910 Credits longxi Required privilege Unauthenticated...

Update now! ConnectWise ScreenConnect vulnerability needs your attention

ConnectWise is warning self-hosted and on-premise customers that they need to take immediate action to remediate a critical vulnerability in its ScreenConnect remote desktop software. This software is typically used in data-centers and for remote assistance. Together ConnectWise’s partners manage...

Critical Vulnerabilities in ScreenConnect Under Active Exploitation

Summary: Critical vulnerabilities in ScreenConnect CVE-2024-1709 allow attackers unauthorized access without credentials, while CVE-2024-1708 enables remote code execution. Hackers can gain direct access to confidential information or critical systems. Immediate patching is essential to mitigate...

MAL-2024-1032 Malicious code in testconfusiontestt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68716301fda6917d0a2abf5455e1ab2d5780d533eb27a1033a84888b0f9677eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1020 Malicious code in analysis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df618b529012f6ffca73476f9c27854370f58223bddbaceb6acb01605d75909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1023 Malicious code in analysis-tool-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab026f9cd9836e60e06d6f1449c82d1e5d26662722dfa2be764f46778eab3b39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1009 Malicious code in execution-time-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb518a6f8c71bfcbaea6494b888189e261a9f7a6be487568339baeb334ad7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-998 Malicious code in vtuanhihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beb3ff692f6cbb63f5bbb6a7875f7dcbd21bae8d980a457f6b8ff5a685185bbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-979 Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-978 Malicious code in can-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f696066311cec522d6c17a2546c56b2eb9c9af638d62dbe8814fc95461eb0750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-949 Malicious code in diil-front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63442371776ec2bb7ec621217d72fc34d237c28b8da4150e0bb243e05ff3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-936 Malicious code in jewishapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19d1435255a826e73cab7760affeac8c2af279590c96b3b7470abe0630f4c1dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-941 Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-933 Malicious code in iifl_express_middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd6065d5aeb8d845fa2198e1ffedbb927895fbac183920ec87d85e89c79c03b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Atlassian Confluence 8.0 < 8.5.4 (CONFSERVER-93833) (Direct Check)

Binary data confluencecve202322527.nbin...

kernel: use after free in nft_immediate_deactivate

A use-after-free flaw was found in the Linux kernel's netfilter: nftables component, which can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can unbind the chain and objects can be...

MAL-2024-888 Malicious code in wlwz-2312-7907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986eff549c21e30a3d6caf1ae2b6601ecd8c3a86c2bf1353db2df2c93d82bc01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-851 Malicious code in wlwz-2312-7506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cdf7577c7f14a65c7696c0bf599db4d39ca3a25ddd8ad778f9c44e6391ea64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-912 Malicious code in wlwz-2312-8203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6157f55472c57f53d1d451afa02655698597f9535be7021e5e9f9b0552863e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...