CVE-2023-21725

CVE-2023-21725 is a Windows Malicious Software Removal Tool (MSRT) elevation-of-privilege vulnerability. Affected component: MSRT; vulnerability type: elevation of privileges with local attack vector (CVSS 3.1: 6.3, LOCAL, HIGH) and no user interaction. The issue impacts MSRT on Windows systems a...

KLA20153 PE vulnerability in Microsoft System Center

Elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-21725 Exploitation Related products Microsoft-Windows CVE list CVE-2023-21725 high KB list Solution Install necessary updates...

MAL-2023-54 Malicious code in @playgami/portal-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02680029cc7be83ef6c68dbbaff4fb6d92bd8c1a71759092c1b7f625c99b786a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-49 Malicious code in @playgami/eslint-config-portal-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4be15151b5b32f83c0928b720d19807598f2d07da01e47b15a580083f99000f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-166 Malicious code in central-ui-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2782e2ac553cc54c3f260350e2d849a07145301efed884e5526b17cab6e08973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-271 Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5328 Malicious code in phup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac74638b6d2daf3c5fba99cb693badc947e824ec0622ec155ad7f1a0ee3100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1565 Malicious code in big-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c644e7d9d5b08b109d7457ceb490ea4a1171713706689d3b66a9a2114f478d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5494 Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Malware operations continue to rapidly evolve as threat actors add new capabilities to existing botnets, increasingly targeting and recruiting new types of devices. Attackers update malware to target additional operating systems, ranging from PCs to IoT devices, growing their infrastructure...

Zoom Client for Meetings < 5.5.4 Vulnerability (ZSB-21016)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.5.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-21016 advisory. - The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files...

MAL-2022-6488 Malicious code in test-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e944bd9669b6670b936f57b7f11202f8a8c0bdf172864bc6e95f9ff567a97ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6038 Malicious code in setup-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba7e063fe3b4609326e55cea28db816c7049297f8cef8b23d8c2d7589f69f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5701 Malicious code in read.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddf471b9c973b8f6e9dc9c46a3c4ad26c64012e45c73a8594e3a3ea0eb7b75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6519 Malicious code in testherejson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c63f695aeb904f6eab5e51afade94f1521960e41be223b65673ae0920df981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3633 Malicious code in hiljsonhil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a91dadef06d9fd1634cbb1c33ed8a1fbaaa638e3fdc30d953d422e169b7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3928 Malicious code in ion-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1050aad6a58ade45dcccf2310e2ba454e5a663aed5ee4e9ece8a3f71786d718d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2209 Malicious code in cors.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9dd5b1dac2fdd321551f9d4217d4383b3205cf183427bb0f1251ca1a7000e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2205 Malicious code in cors-2.8.5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d3ac76cc6d4732cf46e90544d65c4e016ecfe5b8fe92361e1586d61b16a6e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...