MAL-2024-1209 Malicious code in recxn-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ab1a9ec173dddfe29440874a55934c0478e3e08950a7b36638ae2a7127f88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1210 Malicious code in recxn-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccd7ee6ab1ab371569d54327f1be159efb74e581af0866b91b5b724e9c4cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1206 Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-25693

There is a path traversal in Esri Portal for ArcGIS versions = 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory...

MAL-2024-1200 Malicious code in context-hydrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff67bde088549900a1c4d6c993e527f335f8c00e9f4d3d9e4a37dba1a81f0658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in context-hydrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff67bde088549900a1c4d6c993e527f335f8c00e9f4d3d9e4a37dba1a81f0658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1192 Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1195 Malicious code in shopify-app-session-storage-drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a95ee44e756deede8f29d57f2f661bfad35e584127979455d61c95920d1c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1191 Malicious code in metacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f338d105ac1426320dac30e9498ef2e004b76bc148bb13ba645d97ab8fae58a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1163 Malicious code in paysafe-gpf-as-communication-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997f87146bcd457b4e2cb94ddbcfbb3730c96dd9a2b5843fcabcbb9456cf899d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1164 Malicious code in paysafe-gpf-as-http-proxy-middleware-body-replace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69515fe4abb4869b5999b249c8de31a55fd23bda38e3bd9de3c58c5c245bc5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1166 Malicious code in vue2util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e503d3a6579806f33514f591dcc0bca14a4ef78353af9bd2e43875a44bb8076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22799 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.2.6 Description: There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This issue can be exploited by remote...

MAL-2024-1147 Malicious code in francoadvisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1127a2ed227b6e675961778f6ed6ea4c3dd6c307fc9d6c8f4cb1a8ab4c2c1cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1149 Malicious code in hessskinchecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dab9a6776a7691f00229937277c2daff6e5424beadea56b66d3b8ec5f201932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-28171

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten...

MAL-2024-1139 Malicious code in boukiapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e9af3c6aabc1d88faf00494cf4894995cd20b96fb4b40a1d4bf32c98f3fd782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-28171 Delta Electronics DIAEnergie Path traversal

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten...