MAL-2024-7913 Malicious code in @cdc-internal/mkt-nav-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f66f3f203cc6f24d8cb93220716582b3379ca1cfb4478f470c4317051b7407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7912 Malicious code in @bybit-fe/bitd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077b0e3b0405cb1364268fcb890393fb22d8c31261cdd25f310d0e6e82c5a51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7910 Malicious code in @ampol/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7583d639bf7d61499f7cac9da21bc3a507a7af5a21d6ee198303de1e0383f009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8007 Malicious code in woodiorers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de2a81c56e9d9bb341fdfe18ba291124542c69c9831f6ddd857791696c538ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7998 Malicious code in uewopdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840acd749ca1cc60804a43acffb1a61e836448f4ac5759d429f3268dcdd2a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7966 Malicious code in jiworis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1123aec6d4dbdee29f1bb9f2914d16f0b88719c53d3533bd102bd17153693e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7992 Malicious code in teiwosjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6603e4eb0efabf2f58234dae83f6477feb78b02fddfe5b3e0ce6988adaee2df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7956 Malicious code in fieorusls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368b270086b0df625cfccd2dc2249b032f6dd8a269b1948fffd65dccf042bcb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8008 Malicious code in yuriosid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1797849b8d6791e2dbf86f150f160140b8625b0a658a218f594253ce161dcad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7961 Malicious code in hioesjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e448f6dfa1e36df6dac9355caaf3a0111d0a7c155b08d8add69b3f9bf8c29d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7977 Malicious code in nioskdue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c6a02b9e69d61396fbb608cc60e0158aee28b987cb4b4b447a27f1a7bca70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42062

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

CVE-2024-42062

CVE-2024-42062 (Apache CloudStack) : A permission validation flaw in CloudStack 4.10.0–4.19.1.0 lets domain-admins query all account-user API/secret keys, including those of root admins. An attacker with domain-admin access can leverage this to gain root-admin and other privileges, potentially co...

CVE-2024-42062 Apache CloudStack: User Key Exposure to Domain Admins

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

CVE-2024-42062 Apache CloudStack: User Key Exposure to Domain Admins

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

Information Disclosure

libgrpc.so is vulnerable to Information Disclosure. The vulnerability is due to an error status for a misencoded header not cleared between header reads, resulting in subsequent incrementally indexed added headers in the first request being poisoned until cleared from the HPACK table. This can be...

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7955 Malicious code in fabricexample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4137c5f31f16d594edda141045f7330412108a4d9bc3bb7f4786e8d6e4c09eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7941 Malicious code in bs58node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0bc63ca148e297326d229ab17cad2fe91c923308400c4027721533605fb2440 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7939 Malicious code in bignit.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b97d2fd30b80db3253e6999e0e6bbc4ba13e245a6eeb28a167f1eeeefec161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...