Malicious code in the-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80326e5ea00baebd679ede31f64bd96a16aa3a4e24d1158a6769bc380c19f7e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mozilla: Content-Disposition filename truncation leads to Reflected File Download

The Mozilla Foundation Security Advisory describes this flaw as: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to...

Mozilla: Content-Disposition filename truncation leads to Reflected File Download

The Mozilla Foundation Security Advisory describes this flaw as: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to...

Mozilla: Content-Disposition filename truncation leads to Reflected File Download

The Mozilla Foundation Security Advisory describes this flaw as: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to...

MGASA-2023-0146 Updated firefox packages fix security vulnerability

Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash CVE-2023-1945. A website could have obscured the fullscreen notification by using a combination of...

FBI Advising People to Avoid Public Charging Stations

The FBI is warning people against using public phone-charging stations, worrying that the combination power-data port can be used to inject malware onto the devices: Avoid using free charging stations in airports, hotels, or shopping centers. Bad actors have figured out ways to use public USB por...

Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xman-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf5c243019a4ec4df65a182a5f1e9cd5a48899107fcddd0cce2dafaedf57eb69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mozilla: Extensions could have opened external schemes without user knowledge

The Mozilla Foundation Security Advisory describes this flaw as: Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able to open them without user interaction via ExpandedPrincipals. This could lead to further malicious actions such...

Malicious code in divcard2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ab92058cce0d8f23d8944eead7f0dca4d61592d1e0031fe150778d29d076586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reactjs-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0910b3fc5903217a504c18e901cac180c999ea29393221d0264add396238aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-47578

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions b...

Malicious code in @nexthink/investigations-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fb466910cbd8f11eb9f83c1157f4f40e12cf74ff131ebec73f92b3ae0f962ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webcm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955551845e6b60e5f365bfcce33f45968362811ecfea804b34c2e2ecefcb651f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fetch-safer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf1dfb3a2d6ecc40cc3b0b3fcfd3a2e700e4c55872a0cbf2d1094ee714202f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-bi-logger-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www.coingecko.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8c1b1271bdcd10db5055f9b707671495b005bf218f8ce24f002a1c6ece605e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brimo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40fea7443241a7aa4082bf6fec7fb49f51e2dcc12f3981b9f93f07aaea8eafce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in se4raverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e177dd79d613ae465fecaa682ef67d865f0be5b49e6388cc3efc8a40c0d09a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soarou0er (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a325ce97aa884fc8821e85df2183bac0c25d49d952e515f868ecd0243cb6b8d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...