MAL-2024-123 Malicious code in discord.js-v12selfbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 185d6410de1e975280bd6d535f7905cd9264eacb3c2ff98813e61d1a4ae0e2b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selfbot-vl3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93b8a4d4a43d4cc9677b980b29b0c52f7767b770407fc60503959d4b1c585ca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-127 Malicious code in noleakdmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2bc9f62148f8417bf5be1b0b2bc56a7f279b99ab37d5cf7a9c3594278020fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-117 Malicious code in discord.js-lock-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6ced52518f96ad1ced4f124d86601328e2898f7c62f1f619f33a4f0f202a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-113 Malicious code in child-proces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c848180a34155de4ca426e1b0fb5f5d6438c46d1f8c55e8af1a6ddd2bd50078b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-20930

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK. The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2024-20930

Oracle Outside In Technology in Oracle Fusion Middleware (Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK) is affected in version 8.5.6. The vulnerability is remotely exploitable over HTTP by a low-privileged attacker, enabling unauthorized update, insert/delete, and read ac...

Oracle Outside In Technology Security Vulnerability

Oracle Outside In Technology is a suite of software development kits SDKs from Oracle Corporation that provide developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in 600 unstructured file formats. A security vulnerability exists in Oracl...

PT-2024-1221 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 Description: The issue exists due to insufficient input validation in the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK components of Oracle Outside In Technology. This...

MAL-2024-107 Malicious code in djs13-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aeb852fd37db4368a6b873b7a177bb29a5b995b6bf31738e8d8a691ed9706f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-104 Malicious code in chalk-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0f69a9a955c3d91a271b9915114fbf4c8fa069f6358c794b9a27ab30c2df84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-72 Malicious code in djs-fetcher-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 807836abaf822d9c2f12611b17e5551c57ca8bcd82edbaafe72b8fe7ec01e56d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-74 Malicious code in keptnwebservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be099900c6266fdc8e56c9b32fc39db089f596f5ddb49828b3edfcc78cc689ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-73 Malicious code in gh-action-send-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f6d4e13a5a1a14537f878bfa2d4490b5606649326d77d4b88e205a010f124b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-82 Malicious code in sh.keptn.core.control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b8763390772109f1229fafc67d20bf685bb577efd7263c1d76a263f844b84e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cordova-plugin-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72f98238b951534c1437dc8a7c3ee8ab8463beb50c44c59d07cccdd15829386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-40 Malicious code in bakery-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a8e5bc15b6be0a7b0cb44ca4ad86f63a0b563af9160ffe245052f833f3e02ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2023-34323

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming th...

MAL-2024-35 Malicious code in axis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

iodine Path Traversal Vulnerability

Iodine is a fast and concurrent web application server for real-time Ruby applications from Bo Individual Developers. A path traversal vulnerability exists in Iodine versions prior to 0.7.33, which stems from a path traversal in the static file service, and can be exploited by a remote attacker t...