MAL-2024-9367 Malicious code in file-alb-um-zip-new-mp3-516808-dirt-femme-opjhu-pollak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb612c09cfa90c9282458b5dfe5160465641fc306d23577236667e4f8f285c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9359 Malicious code in down-lo-ad-now-zip-mp3-the-whole-love-f2ts8-cblkgz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee055afb7379b67790297252666f4b3c4aa9b46d63c876f6d5361c8cc53dc78e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9327 Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9400 Malicious code in zip-mp3-a-lbum-do-wnload-new-gift-of-screws-q2h3s-xswcix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c826accfd7196480d4adb24ef7362a9ac257c5a2b760e84f936624e6147e724 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9331 Malicious code in alb-um-availa-ble-zip-mp3-file-85058-bright-phoebus-dboqy-oraqvx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896431589d1851d65f8365d770dff71aa63f823917838fd5734b3ee77fe7f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-web3 (npm)

The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...

MAL-2024-9425 Malicious code in ethers-web3 (npm)

The package contains additional code to append a hardcoded SSH key to the user's authorizedkeys file, creating a backoor, along with exfiltrating user private keys to an attack-controlled server...

Malicious code in ethers-6 (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server...

MAL-2024-9423 Malicious code in ethers-eth (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server...

Malicious code in ethers-aaa (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...

MAL-2024-9422 Malicious code in ethers-aaa (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268e60b27602a9e78702588325e96f875b3d37da5815147256c8becfd3d97270 Any computer that has this package installed or...

MAL-2024-9421 Malicious code in ethers-6 (npm)

The package contains additional code to exfiltrate user private keys to an attack-controlled server...

CVE-2024-9143

CVE-2024-9143 describes a vulnerability in OpenSSL: using low-level GF(2^m) ECC APIs with untrusted explicit field-polynomial values can cause out-of-bounds memory reads/writes, potentially crashing an application or enabling remote code execution. Affected are APIs like EC_GROUP_new_curve_GF2m()...

CVE-2023-32189

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189

CVE-2023-32189 affects SUSE Manager (bootstrapping new clients) through insecure handling of SSH keys, enabling local attackers to access the keys. The issue is tied to SUSE Manager Server deployments; exploitation details are not described in the provided docs. Remediation is indicated by the SU...

CVE-2023-7289

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytiumswsaveapikeys function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with subscriber-level...

MAL-2024-9333 Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VulnCheck KEV: CVE-2023-7289

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytiumswsaveapikeys function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

SUSE Manager 安全漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration, and monitoring. A security vulnerability exists in SUSE Manager that stems from insecure handling of ssh keys used to boot clients, allowing a local attacke...