MAL-2024-11192 Malicious code in basic-preset-minting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33b65f9b8e24a04584f5798fc805e84fb63d5891a9b9db633e13c05d4db2feb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11191 Malicious code in auto-cancel-redundant-job (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f645ee53d82a1431bda0a23c718a688c58f23d0537c0da9ff38901d46a92c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

solana/web3.js 信息泄露漏洞

solana/web3.js is a JavaScript library from Solana Labs. An information disclosure vulnerability exists in solana/web3.js versions 1.95.6 and 1.95.7, which stems from a vulnerability that allows an attacker to distribute unauthorized malicious packages that have been modified to steal private key...

MAL-2024-11184 Malicious code in dcapps-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dda6406c22ba94ba014724ba09ba61725dfcb8f77984fe08eb729add3d9e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11183 Malicious code in @solana/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

MAL-2024-11182 Malicious code in @0xengine/xmlrpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8df33e10862a6cfd274bd8eae46b471dd53dbe1c3885b47a379b2f790898f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 128.5 fixed: IMAP could crash when reading cached messages fixed: Enabling "Show Folder Size" on Maildir profile could render Thunderbird unusable fixed: Messages corrupted by folder compaction were only fixed by...

MAL-2024-11181 Malicious code in synch-prod-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff531f663782c2e1a1b12202fa492a99336662a683528d75910f308b12a22dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-9247 · Solana · @Solana/Web3.Js

Name of the Vulnerable Software and Affected Versions: @solana/web3.js versions 1.95.6 through 1.95.7 Description: A publish-access account was compromised for @solana/web3.js, a JavaScript library commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from the fact that an incorrect implementation may lead to the generation of weak RSA key pairs, resulting in a cryptographic vulnerability...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Amcsgroup Trux_Waste_Management

CVE-2024-22734 Exploit PoC for CVE-2024-22734 !imageh...

Race Condition

Overview pyFFTW is an A pythonic wrapper around FFTW, the FFT library, presenting a unified interface for all the supported transforms. Affected versions of this package are vulnerable to Race Condition due to improper synchronization when accessing shared resources. This can lead to memory...

MAL-2024-11142 Malicious code in flutter-angular-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9260d321765ddb3fe1ce34c703f7caa0678c61f5701aa82730d092fcb83373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11155 Malicious code in safeness-sb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d558c870d1afa6f183ac52e8fe21ea328ac4e688f64dd389d3a1b4e98f0a93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11129 Malicious code in all-dl-404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11130 Malicious code in citiycar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af41f2b48bf5f5bcb57331c00230285bf5d8e9edaee69e799f5b5bb5bfc14efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11149 Malicious code in noirxnodemailer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb5c01486942b32fea497d1b731b1d73ca00dbbcd6b588f8065e24b128b5805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11153 Malicious code in rudije (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcdd046bf1e56d4d7e470f97bf73aba4e564024ec6a89b1493ffc7d5c5a7101c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11135 Malicious code in cussionsbp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 944229b70b1df938c01b5e21ee9d7d8799d3e104488f5ed8669176a2851c3467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...