CVE-2024-45678

Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack that requires physical access and expensive equipment in which an electromagnetic side channel is present because of a non-constant-time modular...

MAL-2024-8717 Malicious code in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fc256bc2ec352c5c3f508243cd7ca95fcc61510287dc1dc8a687cc12f6ec9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8712 Malicious code in dowload_ebok_farouche_atalante_by_emilie_druilhe_nx2bj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79c4837467a6a1cd6dab8ea3527e540fb19423a81cccac5e916eab5ad9fee997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8718 Malicious code in dowload_ebok_women_who_run_with_the_wolves_by_clarissa_pinkola_estes_phd_p7pgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a2c3c51b9a2299a8d75d9bedd630252bc337635de7b3c44c0d1da0054fc71de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8714 Malicious code in dowload_ebok_lenin_y_el_totalitarismo_by_mauricio_rojas_szvld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee471b163c12366bb71dcefa110286c5a5ea8c0cfd9faf231c4f9cf8f9be081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8710 Malicious code in assistance-finder-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736cb085b408315e3153f05af689db208cc6cd59cda88238c550b56a34e55a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8720 Malicious code in muthuhacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1182ad621bb84725caaefb330e0f2c7826ba7a78894d1f5a207d0daf17bf0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8723 Malicious code in wekan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364accf2b084493722b67d10a835ba3f2ac5a70cb79038e1bdad1f6fb1bf71cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8721 Malicious code in muthuhackermc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09a7667143c706293523d827f0f87172a810da00d589eb4199a5758aed61390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31598 · Unknown · Authenticator

Name of the Vulnerable Software and Affected Versions: Authenticator versions prior to 8.0.0 Description: The Authenticator browser extension generates two-step verification codes. In versions prior to 8.0.0, encryption keys for user data were stored encrypted at-rest using only AES-256 and the E...

CVE-2024-28100

eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...

CVE-2024-28100 Stored Cross-site Scripting leading to arbitrary actions taken on behalf of users in elabftw

eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular user can create a circumstance where a visitor's browser runs arbitrary JavaScript code in the context of the eLabFTW application. This can be triggered by the visitor viewing a li...

CVE-2024-23362

Cryptographic issue while parsing RSA keys in COBR format...

CVE-2024-23362 Improper Input Validation in Trusted Execution Environment

Cryptographic issue while parsing RSA keys in COBR format...

CVE-2024-23362 Improper Input Validation in Trusted Execution Environment

Cryptographic issue while parsing RSA keys in COBR format...

CVE-2024-23362

CVE-2024-23362 is a cryptographic issue in Qualcomm closed‑source components related to parsing RSA keys in the COBR format. The vulnerability is tied to the Trusted Execution Environment in Qualcomm chipsets and is tracked across multiple feeds (Red Hat, CVE databases, and vendor bulletins). The...

Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8635 Malicious code in @diotoborg/sit-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5df872f2f927576a8a09127da72400b0228dd051f635b6572ce6765633693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8167 Malicious code in @diotoborg/autem-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239c77c66f6ccb8f7dcbcbd73746657981045cbd106678133760ac1a486b680c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8555 Malicious code in @diotoborg/qui-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f243a58b4aa9f4d920344bfda2e796cabe4e84ee646647779f6aa42e3d23c95e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...