MAL-2024-8847 Malicious code in ethersscan-api (npm)

The package contains the BeaverTail infostealer malware associated with DPRK threat actors. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bdf32a4e45ba09760610d3f87cf8cfdae4d386a4ee4df99f1973ab577373620 Any computer that has this package installed or running shoul...

MAL-2024-8831 Malicious code in indrive-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 011bd3f8ccaeb08ace40949b5860fb7a582858cf482c46f4e615b2b2db087e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45063

The function ctlwritebuffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process,...

CVE-2024-8178

The ctlwritebuffer and ctlreadbuffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which...

CVE-2024-45063 Multiple issues in ctl(4) CAM Target Layer

The function ctlwritebuffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process,...

CVE-2024-43110

The CVE-2024-43110 issue affects FreeBSD ctl(4) CAM Target Layer. The ctl_request_sense function could expose up to three bytes of kernel heap to userspace. Guest VMs exposing virtio_scsi can trigger these vulnerabilities to achieve code execution on the host in the bhyve userspace process (typic...

CVE-2024-42416

CVE-2024-42416 affects FreeBSD ctl(4) CAM Target Layer: ctl_report_supported_opcodes did not properly validate a field from userspace, enabling an arbitrary write into limited kernel help memory. Impact: guest VMs using virtio_scsi can abuse this to execute code on the host bhyve process (root), ...

CVE-2024-8178

The FreeBSD operating system contains a vulnerability in the ctl(4) subsystem where the ctl_write_buffer and ctl_read_buffer functions allocate memory to be returned to userspace without proper initialization. This flaw allows for potential code execution on the host. Specifically, malicious soft...

CVE-2024-41928

Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve...

CVE-2024-41928

FreeBSD 's bhyve hypervisor is vulnerable to a buffer overflow in the MMIO handler for the emulated TPM device . This occurs when bhyve is configured with -l tpm,passthru,/dev/tpmX, as the handler fails to properly validate the offset and size of memory access. This allows a guest VM to read or w...

MAL-2024-8826 Malicious code in sigma-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swioeur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce43adfbfb4dffeaac71bdccc909f5f81be06022b76faea25d8fcf582f1ac51b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xwuirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df36d2af53be006f85a47e0a26683a059038c7f0135c497743b6b0c318d7f1b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8781 Malicious code in lioejre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2210c252fdd314dcf9fb63873b09b4cb94666ac597611b36276f4b2f8d5fb1cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8818 Malicious code in zuwortr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a6fc476831f5d1665908a5e68c190efe201ca54e85255b4572f2fd10ca6c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8817 Malicious code in zuwoirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e5c0bb7c2073b9aad16bf6ef85ed41176cc6c85197a2797fa6bb29ff439d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwoeurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 080d83da56e40be2c07c71a7fffafb46f7514e83a531b5b88aaf22f63d275997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8795 Malicious code in phoenix_3_showcontroller_crack___exclusive___cocaine_gk9mr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01cc981fc03954cf64b70bbcd7e9d121d6c99aa82ccf3695bf537e2a19847e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8749 Malicious code in brasil_viagem_omsi_2_crack_portable_ckw74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882faa2f5df2db446d465a31c900f7463cc38ab821321ce63ec4d1be5a96112c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8753 Malicious code in cap-client-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18ed3c31f0a20e7a224256d46a896df654fcaf6e60ac3f4fac7639672b320f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...