MAL-2024-7770 Malicious code in mock_simple_module_relative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5314a68f10a03af92b308ae221d15aa143a97ae197cf96c655476db5638a084b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-36406 · Zohocorp · Manageengine Ddi Central

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue is related to an agent takeover vulnerability due to the presence of hard-coded sensitive keys. Recommendations: For versions 4001 and prior, consider restrictin...

The vulnerability of the IBM InfoSphere Information Server software platform, related to errors in processing user-controlled authentication keys, allows attackers to disclose sensitive information or alter arbitrary data.

The vulnerability of the IBM InfoSphere Information Server software platform is related to an error in the processing of authentication keys controlled by users. Exploiting this vulnerability could allow a malicious actor to disclose protected information or alter arbitrary data...

The vulnerability of the CI/CD system’s registration data protection mechanism in TeamCity allows unauthorized access to closed keys by attackers.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to th...

CVE-2024-6395

An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability...

CVE-2024-6395

An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability...

CVE-2024-6395 GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability...

CVE-2024-6395 GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

An exposure of sensitive information vulnerability in GitHub Enterprise Server would allow an attacker to enumerate the names of private repositories that utilize deploy keys. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability...

CVE-2024-6326

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders wh...

CVE-2024-6326 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders wh...

CVE-2024-6326

CVE-2024-6326 affects Rockwell Automation FactoryTalk System Service. The vulnerability arises from a lack of explicit permissions on the backup folder, allowing a local attacker who starts a backup/restore process to temporarily access sensitive data (private keys, passwords, pre‑shared keys, an...

CVE-2024-6326 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders wh...

CVE-2024-6325 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by...

MAL-2024-7764 Malicious code in evil-hitcon-2024 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe1b43a902dc36ccbd6d7dc4e8f50682dc9580bc0bd95e4a572151f480e3116 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7766 Malicious code in selfbot.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb151c00154198176313030563b649e051266589b603c6f66325730afa5d5d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-37592 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 Description: An exposure of sensitive information issue in GitHub Enterprise Server allows an attacker to enumerate the names of private repositories that utilize deploy keys. This issue does no...

CGA-H2VG-PC8H-2VP4

Bulletin has no description...

MAL-2024-7751 Malicious code in img-aws-s3-object-multipart-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64fdc2d1b94cc9bdb2bee2f06bd13d0be50208d8185a82a733718d2edcdcee70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7755 Malicious code in moti-another-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d69768182e243b62f5e59ad12afa5e852bf7d96caa187facab436fd3b38ca69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7756 Malicious code in moto-test-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2387221aed62494dae4d55fdace72a03b718b13dd18dec7ea97b0df19d4865f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...