EUVD-2024-0614

Malicious code in bioql PyPI...

Craft CMS 4.x < 4.13.8 / 5.x < 5.5.8 RCE (GHSA-x684-96hh-833x)

The version of Craft CMS installed on the remote host is 4.x prior to 4.13.8 or 5.x prior to 5.5.8. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution RCE vulnerability affects Craft 4 and 5 installs where your security key has already been compromised...

PT-2024-5891 · Unknown · Uefi Firmware

Name of the Vulnerable Software and Affected Versions: UEFI firmware affected versions not specified Description: A vulnerability related to the use of an insecure Platform Key PK has been discovered. An attacker with the compromised PK private key can create malicious UEFI software that is signe...

MAL-2024-7904 Malicious code in @bingads-webui-react/primitive-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff052dbe83f6d9ca607174f02e7041d3d73e86c4e7bc0fe7c885c34f3011ab72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1005 Malicious code in zach-remadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f50cccaa2f4485221ea7d325dccdcb0b35607b2a4a228bfea96442275bcb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1523 Malicious code in bfx-facs-graylog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c827ea9bb1a85af6bce95ec512fdc282af7bf7d6d2a00174548b5d52c710d1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4694 Malicious code in moonbeam-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8999054fa21ea2342ad98d26a3058503720057689847909ecac60f10ec221c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...