MAL-2024-7299 Malicious code in @zitterorg/nobis-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d1fcd96b36ece0c911e6d8f3f20803aab5a22cba8038f0b2c1142ec3092ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7277 Malicious code in @zitterorg/modi-quaerat-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e570cdd025b0f55289e14f0be98011189b566e90522f177134e3f7c92290e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7283 Malicious code in @zitterorg/natus-eos-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64f0b3f26fa78871f4c7f4698c8c01fb4573d6e3e8216aaf4b478fdbcb2ac41f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7398 Malicious code in @zitterorg/ut-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156a4b011f268f260000f45c26a9569917c938f7fe5860638e44bbf758b24a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7303 Malicious code in @zitterorg/nostrum-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42e8c65056a0044f23ae7602923c9b87835107b8b6878ad9f0aeea75173471b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7156 Malicious code in @zitterorg/deserunt-dolorum-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be840037314fe2fcb26255a38d6af26e3232a0a381e97aa26417301dba33f56c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7309 Malicious code in @zitterorg/odio-itaque-harum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad4ea98bb35da351db07a43dfb0721a687691bb0995ec319ae615d96ff6e9aaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7109 Malicious code in @zitterorg/adipisci-dolore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6263b7deedf98d441a291418f6f8d1e7b127c73b15d8cd172f7fdcfed1edb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7261 Malicious code in @zitterorg/magnam-doloribus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a2c0fe3e29bb3384921b1a0aff2c39c54bae151176af9eb6a3536f1d18006f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7351 Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7103 Malicious code in @zitterorg/accusamus-numquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e6b7f30cebbb0f9723ab68abb04606f2f8afa2cb02cd32200634384636e6ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7374 Malicious code in @zitterorg/repudiandae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06241bc57f5320925f66ab1506bc038df088d5600d2540aba83a38d900a0be5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7412 Malicious code in @zitterorg/voluptates-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33766107e2553aa978698984550099370e587031248fb725ae92a170526792e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sharp Multi-Function Printer 18 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "17 vulnerabilities in Sharp Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html The text version is also posted here:...

MAL-2024-7097 Malicious code in render-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531acbb1583ee41c2b1d689b07228870c585ff764c2fc902a93854b566181af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7096 Malicious code in msa-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed49b2fd60a4f02b928360047bfd5c5d86159fb1e1b86c27b528a72dda41151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Salesforce CPQ Security Breach

Salesforce CPQ is a cloud-based software from US-based Salesforce, Inc. that helps sales reps quickly and accurately configure, price, and quote products. A security vulnerability exists in Salesforce CPQ versions prior to 7.0 that stems from the application allowing an attacker to read API keys...

CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs (CVE-2023-5678)

The version of cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5678 advisory. - Issue summary: Generating...

CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm / hvloader / nodejs / nodejs18 / openssl (CVE-2023-6237)

The version of cloud-hypervisor-cvm / hvloader / nodejs / nodejs18 / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6237 advisory. - Issue summary: Checking excessively long invalid RSA...

CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm / edk2 / hvloader / nodejs / nodejs18 / openssl (CVE-2024-4603)

The version of cloud-hypervisor-cvm / edk2 / hvloader / nodejs / nodejs18 / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4603 advisory. - Issue summary: Checking excessively long DSA ke...