Malware in portal-ui-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7431 Malicious code in portal-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ed4030d37e53e09fa9a44db9742e1fde7399bd6de75e13e86d290b88a22251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7415 Malicious code in compiler-wasm-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3e3404f77486c9124e70890333cce19382125d07dac40b2ed4b87a466c855e The OpenSSF Package Analysis project identified 'compiler-wasm-lib' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

@aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

GHSA-VG6V-JCG3-5MP7 @aofl/cli-lib Prototype Pollution vulnerability

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28303

Name of the Vulnerable Software and Affected Versions aofl cli-lib version 3.14.0 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution in the defaultsDeep component. Recommendations For...

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38987

The aofl cli-lib (also identified as AofL JS ) version v3.14.0 is vulnerable to a prototype pollution flaw within the defaultsDeep component. This vulnerability allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . No spe...

CVE-2024-38987: Improperly Controlled Modification of Object Prototype Attributes

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

The vulnerability of the ExtractImageSection() function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the ExtractImageSection function in the LibTIFF library is related to the copying of buffers without checking the input size. Exploiting this vulnerability could allow an attacker to cause a service failure using the created Tiff file...

Malicious code in curly-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6846 Malicious code in curly-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6820 Malicious code in cards-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6637 Malicious code in appium-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in panda-lib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5451 Malicious code in panda-lib (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3074 Malicious code in symphony-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d173722bd09e0ce0c234f33cbeefd7066a3b8e6d046e120a058936146dd1109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...