MAL-2023-8631 Malicious code in @lognex/notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9236ea5d072a10fa7e7acc48f2a65e85f8ad6cc9edd1158828a3ff4db63ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2023:4591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8612 Malicious code in minotari_wallet_ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48f015d501f7fda235545da39cb174ad6dfd4de2416ecb639a39644fd44618b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8594 Malicious code in areweplayingyet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc131f3b217a186c1278c0f623cbc243ac04894e5fed716f5ecdce60a27b3944 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8595 Malicious code in arubawebappbackend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13e80ca401e27abd48a78b1577012b1f0eb9ac284b98ca33db5eb920ce9ab41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8549 Malicious code in wehackreposss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 886efcb413ccb918dc087a951fa61416e8b1175b0ea3009a4e273b62067fe385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8543 Malicious code in customer-journey-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611ae83fb22fa782fc27b23da9fb90fe5956c5e0008d94818de724f3c6b60c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8533 Malicious code in xpub-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc3e9ded369fe8fed74a7f23ab0c33cbbda2a1e16aab8c2283faba59903c49d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8522 Malicious code in discord-web-stream.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34fa39c7559a1834d28c5b1e0b3470965c15470b60f2f9c1a196a823e394a49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8520 Malicious code in oasis-os-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6498095a1cca97f72b428b0ee87d8238a47478af4af6bb1c0519386b5a26247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-9498 · Unknown · Laquis Scada

Name of the Vulnerable Software and Affected Versions: LAquis SCADA affected versions not specified Description: The issue is related to the LAquis SCADA system, where an attacker can access locations outside of their own directory. This is due to incorrect restriction of the path name to a...

AMD Secure Processor Security Vulnerability

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from AMD. A security vulnerability exists in AMD Secure Processor, which stems from the fact that insufficient validation of the SPI flash address in the bootloader could allow an attacker to read data mapped to memory other than the SP...

MAL-2023-8515 Malicious code in discord-web-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f33d84f92d16d56339b7efbd2ce2488e85ae2c177d33022e28026c4d74793e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the gf_isom_use_compact_size() function on the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the gfisomusecompactsize function on the GPAC multimedia platform is related to writing outside the field. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in zoo-a11y-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f46f844f7e5b737f7ab6feb22cb90afaa4343ce46ab584193068d36497fb8ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8504 Malicious code in plugin-getting-started (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b95fa1847620d5c168b65bdb2d2753b26090a68b3c1f7846edd359a80d3e34f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5550

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution...

UBUNTU-CVE-2023-5550

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution...