MAL-2023-8173 Malicious code in fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bacf80ecaabd478055cb654ae5266e4b1d421e4de4fc9a563cdb1b2d94d449c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8147 Malicious code in nvthinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b205106bb201085c25d6e96124abcba44002344c6fe23341cbb164c753860ef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8131 Malicious code in fca-bucu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2908145aa0c6daa50e572b3120bf06a85fcc270fc0cdf0733af4bf1e624bf0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8157 Malicious code in thinhdz2001-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab41a3de452cf2af66e9a0c6c82ff728a75a79b69bee1df9d834f6989e86134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8130 Malicious code in etheres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2233d7c65c25f473a3361254525a58f1182dfe5f8f3e9f0f4ac0dd68a43401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8139 Malicious code in hardhat-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fe0a38eab92ae516ffa0abcd348cd662325f6e1cb7ecd957bb2918d5aa7350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8140 Malicious code in hardhat-gas-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca926144035df7a8d332e6904ed879e15a43427f301b5b1849c40e2b82dfda07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8127 Malicious code in eteres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f3da402b965cfedd565147e0db9b2f7d55656136aca4019d62ca23c6e30c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8108 Malicious code in surf-sharekit-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449f014291c34fa4bc1a855658d8ff0b9fe4788e1986e2410d3dc82ac8e50abb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2023-1636 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2SESSIONSETUP commands. The issue results from the lack of control of resource consumption...

MAL-2023-8106 Malicious code in paypal-validators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebc6b081257d4c572b2609876f97c2068316a5023ba3ed2acc567fbca9e0f2eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PCI v4 is coming. Are you ready?

If you’ve landed here the chances are you are considering PCI compliance. At present the scheme is running against v3.2.1. In March 2022, the PCI Council released the long-anticipated v4.0. The Council stated that the changes represent their determination to “continue to meet the security needs o...

MAL-2023-8089 Malicious code in antdesignpro2021 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2743e3748612ab32fe4aaa84ec3ee0b4a6f6063b07bdf9afa1bad50ade1d6ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8073 Malicious code in limitd-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaca8a4172555e8b77c7a19d6596b6f56a357374861835e8f805915783a482e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8069 Malicious code in cxday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337ddbb53f9f6b87096ad49167380b2190f06b80c03e8d904f742a33e71b6596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-4015

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can lead unbinding the chain and objects be deactivate...

CVE-2023-4015 Use-after-free in Linux kernel's netfilter: nf_tables component

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can lead unbinding the chain and objects be deactivate...

MAL-2023-8058 Malicious code in @ks-radar/radar-event-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ce11383a1d9efca79de168a03a8a27792a475fdc6ef35eaf6500d76bfc2d3f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8056 Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-17671 · Unknown · Imgsys Cmdq

Name of the Vulnerable Software and Affected Versions: imgsys cmdq affected versions not specified Description: The issue is related to a possible out of bounds read in imgsys cmdq due to missing valid range checking. This could lead to local denial of service and requires System execution...