PT-2024-37910 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: foreman affected versions not specified Description: A disclosure of sensitive information flaw was found in foreman via the "GraphQL API". If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin...

grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend

A flaw was found in Google gRPC due to HPACK table poisoning between the proxy and backend so that other clients see failed requests, resulting in a denial of service. This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent...

MAL-2024-10393 Malicious code in pupeteerreqintercepter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a217fdabdcda03ee1d01755ca128aecf9f98f7c3f9883f4f39eb1a0fe00e799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10394 Malicious code in pupeteerscreenrecordr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86062d919b5202bbb695b8b4f64c2ca5536f0e180f47f0e88e37a7386a9b41eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10392 Malicious code in pupeteer-screen-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b0093b526d3b4549702cd0e61fb30db7ac24b4896657f7453d1150c91217bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10389 Malicious code in pupeteer-har (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29c5aec1082b7aaaca7ba03715be8a3319d84027ef3fff58e5d808622a6bc074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10391 Malicious code in pupeteer-recorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d95a80070e681d1d0484386220f2cf4e4a5ddb369927c731fabf829893c8bdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10399 Malicious code in puppeteercluser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115c66735b84ea5c7e1ca9cd5becce7a282f7a736ec3706af7c56b304b9276a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10388 Malicious code in pupeteer-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a4104c19abe3998b35fd4b5abd138a490a1e4c0642ce726b1401f544ae34f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10396 Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10395 Malicious code in pupeter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 966b43dc6a13ffe5ab2a0430ace8a9f70a365db096dfe0ac789eebe2675106b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gitsign 安全漏洞

Gitsign is a tool from the individual developers of Gitsign that enables key-free completion of signing Git commits. A security vulnerability exists in Gitsign that stems from the fact that there is no additional validation to ensure that the hash of an entry matches the payload being validated...

Hackers Claim Access to Nokia Internal Data, Selling for $20,000

Hackers claim to have breached Nokia through a third-party contractor, allegedly stealing SSH keys, source code, and internal…...

MAL-2024-10342 Malicious code in puppeteer-firfox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a55a17eb7e007866e5395b293f5fc114c649e3d32a5800719c383db442a35f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10344 Malicious code in puppeteer-req-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10345 Malicious code in puppeteer-screencorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d2ccbea818ced00f6a9ed565b99cbfd40e5ef1caf3ea9562d807c73a5c1889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10336 Malicious code in pupeteer-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcf51dd4fc2dfb14ac7624c49c8b271c9da6614832cb069c3ac83142590f51b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10337 Malicious code in pupeteer-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84f1706624205e21ef071dc91821f8d234138504f1458d980864e2dbfb38b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10335 Malicious code in pupeteer-extra-plugin-adblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfffdf6c32cb0c90da6d3c8ba90795b20263639632de94ffa38855818054b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10338 Malicious code in pupeteerextra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e80a4a5c8c56739a14b54aadce221ed5c807267e78ac7fbda47460d3482d9bd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...