MAL-2023-8315 Malicious code in emob-lp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c69ecc160f72c29544fec3ce637a39a70d5d458f1e42487180d41443154116f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire()

A vulnerability was found in NodeJS. This security issue occurs as the use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module...

Atos Unify OpenScape Path Traversal Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system via the Common Management Portal web interface A path traversal...

MAL-2023-8272 Malicious code in fca-dongdev2006 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf5437c60d73e7273ff4571779c50accd1552a3d68fc66cbba3810860670bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8271 Malicious code in corporate-delegate-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177836844dbb30a41ac458ca968707ca386ae3dce8f06fc76b0cc7b9285a6518 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the rsvp_change() function in the net/sched/cls_rsvp.h module of the net/sched component in the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the rsvpchange function in the net/sched/clsrsvp.h module of the net/shed component in the Linux kernel is related to the release of allocated memory outside the system. Exploiting this vulnerability could allow an attacker to cause a service failure...

MAL-2023-8258 Malicious code in starcoffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21d2d2d622bacbbb48186877f4de201e3ef7466ac586b34502e7df3b1dfc5e37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-43124

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

nodejs: mainModule.proto bypass experimental policy mechanism

A vulnerability has been discovered in Node.js, where the use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json definition...

MAL-2023-8244 Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8245 Malicious code in arcotest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078ddfad78f2c5ca9ae82c040a4a51c180fedd8116e46f32a6a6fcdff2e8561d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8250 Malicious code in fca-priyansh3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd0e5c080a7eaaffbca2eaab0a8d833f9f08cb3b4a122235e6d1c61adb46a0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8253 Malicious code in thinh2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f8d03b386fe1014644e4170699db11a1fccd1cec5639a5e99ac272d9fd12c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beta-fhr-nxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d17d64e039783ffdcb641aab3eea7afee429e6a2b80ebb2556f96d8951beb39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8228 Malicious code in beta-fhr-nxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d17d64e039783ffdcb641aab3eea7afee429e6a2b80ebb2556f96d8951beb39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8236 Malicious code in fca-rqzax-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ecedbb47457d84a3321523d3e9df1d860170b1c57af2d4fb6b5faf7f89b742a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8235 Malicious code in fca-manhdz2004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3c18d4b3f99dcbaff3772644af19fb0cc292ab9ad541543f04450e83d004188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8230 Malicious code in chat-api-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f583cda7182f56d351d1ce81779546a87791f7686b5acf9ae3d1e80250e9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8233 Malicious code in fca-bot-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a11398483bdb1e63dc33177aba0b472a6fba5ea548f7e7bea526beb89f23551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8201 Malicious code in @zettle-bo/pp-profile-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...