MAL-2024-9178 Malicious code in replaceable-media-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6f6611eabb1686bf9e41a305a75a4bce89c0c30c903fc91235ffd22895e097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9177 Malicious code in redis-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02766e4613356d0e36f10a314a6c3e8b1b712dc126813ac3beff0958cb22c71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9155 Malicious code in juno-composer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87b94bdf6eefb534b5a6861dbb649f8b917be121e14576d40becf3f97a9e5828 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9180 Malicious code in sae-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e232994dc60ca74f8ed71a17ce07b638d01a617b5ff03cdfed8b57b3c4e8ad8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9160 Malicious code in language-rego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540256008e129e110408e039bf594aff2061bf0cd955b6b80004f53aa93b9d57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9203 Malicious code in videojs-sneakpeek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ede982076cae3541cce714f8770049de3c4cea94a0049eb7ed6e2273852255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9159 Malicious code in kubeman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6d4cbe85dc40f9f7ef83650de23c841fe055085bfe4da5053024d3e3dbb686 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9165 Malicious code in makebetteremail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c05ae267bfe19d2a54f813347f8df26dc550dbe7da0b20207863fd732bcd55d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9187 Malicious code in svelte-hms-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aef4271ee0c11f041f62c675a00f8a2cba57ed30894dad3585993fc83796d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9186 Malicious code in sp-api-app-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c1afd5646e2a56f333e462e72e1410090f84341d7c0c542598ef4a3061a180 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9166 Malicious code in nanoslackts-env-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe61e9c24b26d76088e167848056dfe52c47156a72948c418b51b949e65b3e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9153 Malicious code in google.fhir.r4.google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7012397615b00658dfd442f3290a086b3d99271311d8a7f55055d5188b04e5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9191 Malicious code in uchiwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b78fb0f3b60891d298b32c03ea935ba7012fa9c434f044309d2107610e14bd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9126 Malicious code in asp.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7c024883d91bf9fdd3cb49b01873767cbb851c7b663fd2c1ac9d12030157b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9174 Malicious code in openai-bun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6861

A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication keys which could result in a compromise of the entire product's API. Mitigation To mitigate this...

PT-2024-6883 · Palo Alto Networks · Palo Alto Networks Expedition

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition. This result...

PT-2024-6886

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition affected versions not specified Description An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition. This result...

PT-2024-6717

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: The issue is related to an SQL injection vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to reveal Expedition...

CentOS 7 : thunderbird (RHSA-2021:2263)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2263 advisory. - OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The...