MAL-2024-1608 Malicious code in legacyreact-aws-s3-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60942b87c6d2334d09d059276cc2d838002e2e0f5093e53fc6819e1972e02282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1500 Malicious code in @juiggitea/vero-placeat-ea-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce8c3feba471a4cbe36afc647558994783b5f59eb77754f5f4401e1abf65fcf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2023-52792

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Do not try to cleanup after cxlregionsetuptargets fails Commit 5e42bcbc3fef "cxl/region: decrement -nrtargets on error in cxlregionattach" tried to avoid 'eiw' initialization errors when -nrtargets exceeded 16, by jus...

PT-2024-25951 · Nebari · Nebari

Name of the Vulnerable Software and Affected Versions: Nebari versions through 2024.4.1 Description: The issue concerns Nebari printing the temporary Keycloak root password. Recommendations: For Nebari versions through 2024.4.1, consider changing the Keycloak root password immediately after setup...

WordPress EmbedPress Plugin <= 3.9.8 is vulnerable to Broken Access Control

Software EmbedPress Type Plugin Vulnerable versions = 3.9.8 Fixed in 3.9.9 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31284 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0f53658201e5 Credits Majed Refaea Required...

PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...

MAL-2024-1158 Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-19189 · Elspec · Elspec G5 Digital Fault Recorder

Name of the Vulnerable Software and Affected Versions: Elspec G5 digital fault recorder versions 1.1.4.15 and before Description: An issue was discovered in the system logs download mechanism, allowing directory traversal to occur. This could potentially expose system logs. If local network acces...

MAL-2024-1091 Malicious code in udp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0339bd7712cdbec458d820fe33388f955c5fdd4fb38e14e3fad8b2f6f4313d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1040 Malicious code in emilkylandertestnpmpackge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd319ba7b8c79bd32d0502d11aaf6fe6a8689e11b814d211d891de83981fc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-784 Malicious code in wlwz-2312-6802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a48a8fcdb28633f92dd057bc5d3d5d23bde5125b348b9e3b31c97d09bdee12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-406 Malicious code in wlwz-2312-2602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6ae133e3bf83d14cd9cce6ac2d71b455b6056e2b5ef16bf43c18fcb4eb7ef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8445 Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djsmusiccc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97843d99a4edd4ddf8c30e9c20d9779108bf139af236b556a657e48805a1b567 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

MAL-2023-8324 Malicious code in eeddffrrvvrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8244 Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8086 Malicious code in web3tool-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1728380aea0ef49ccdd469e28f2ce128f28bd46843f086103098fab9badafab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7926 Malicious code in @intact-lab/ngx-iceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ed3b552a74f73b31973f3f5a4a21e344617adcaef85804c109a61a1956facc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...