CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

CVE-2024-9464

CVE-2024-9464 affects Palo Alto Networks Expedition: an authenticated OS command injection in Expedition allows an attacker with valid credentials to run arbitrary OS commands as root, risking disclosure of usernames, cleartext passwords, device configurations, and API keys. Affected are Expediti...

CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls...

MAL-2024-9184 Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9131 Malicious code in blockscan-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23b097890bdc5ceca69e7a1825d9d9b8ffc6564479e38a2077ec59e2e62f3fc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9210 Malicious code in yayt09 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f516b79555d52c32afd1ce32e7bfae901bc56f19a561cac5163a59c48c500e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9189 Malicious code in tmjadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475c5b4af37e7cfb76bd4aee1d562a5a02084de354a75526e4caca8e938722c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9130 Malicious code in bcsgb0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfcb4c38c6f16fbc50c3efb3401f855ea4cad84cdaf68c9badd88e80a581e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9156 Malicious code in jzcgnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9455756ca2c208ad77043421b5bded539fb79610d7430a2a6aad5be8c32c82c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9124 Malicious code in agquu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36919c509db732cc8b07bcc95c88a4b21998332aa2abc81d5a35a9340345b3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9182 Malicious code in script-updated-roblox-redwood-prison-reworked-script-c5bqbv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b78659fb6218288f54c62b3f447a830fb0280c0b956bf43c74841db5510e7955 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9138 Malicious code in code-script-new-roblox-muscle-legends-script-tr9plv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 780f0af2802d39365386734610e4539ac7340ae349dd24768d304da50c560f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9200 Malicious code in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26688f0b878a64cb8685eb7de542d452b53b0fed1f1ac1f1da158e128bb006c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9195 Malicious code in updated-script-rainbow-six-siege-renown-method-unlimited-undetected-updated-2023-aaseax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e38a8e46fd7a50a4aa74b0c1f46075a329295be810eb70a479185500004b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9148 Malicious code in get-new-script-rainbow-six-unlock-all-skins-elite-and-various-other-updated-2023-q6uukf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db8c54f4bb9ad19f21f98ee87293ddfa45b05b6953115df873afd3b5092c1b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9142 Malicious code in dhojpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935ef1aec71f11b4c67fd9a9faa58e6a292dc183fc14a77ca23d83286ada95ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9120 Malicious code in 8r8x1v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c85162ba3dae6d21a3b15b773d8deca5d39734a83b06a4a7fbb0dda264071a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9119 Malicious code in 4388es (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3dfb157f47fc220ed71347fb2c0c09cde05386d0a8597db1aef6fb7959ef8f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9170 Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...