SUSE CVE-2023-32006

The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note th...

MAL-2023-1438 Malicious code in exp-core-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31032b8597c788373193761b90d13ba7f409a33d3a75f62a7ee5ba4e4ff9804e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1439 Malicious code in fca-jordan-amiir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3b3ab4084f3845b39090f0a666fb9b5fb6898b09d11d28e4d1a25fd63e3cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1441 Malicious code in react-native-transparent-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc4c56c3c11c9b9f70d9cc95f941b8549be2b5b18c367c51ed8d531cb0f2ca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nextcloud Talk Path Traversal Vulnerability

Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. A path traversal vulnerability exists in versions prior to Nextcloud Talk 17.0.0. An attacker exploited the vulnerability to write files outside of their intended cache directory...

CVE-2023-31449

A path traversal vulnerability was identified in the WMI Custom sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the WMI Custom sensor into behaving differently for existing files and non-existing files. This made it possible to...

CVE-2023-31450

A path traversal vulnerability was identified in the SQL v2 sensors in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the SQL v2 sensors into behaving differently for existing files and non-existing files. This made it possible to traverse...

MAL-2023-1073 Malicious code in blackberry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9964dae790097d3d0611a8ce5360dfdaa0b13f3cd3c065a19d6266778587688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1074 Malicious code in deptrailoitaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1517b7969146ae1576e26d6cf463560b498917613bff95cffb733d16df00406d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1071 Malicious code in @zplayer/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9325a8f5e2a004590f244b8d6b932901682f7c476506f59fdf0cdf8792ebd914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1070 Malicious code in @freestarcapital/collector-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6d60a5b8b659a55831770d4cd8f9d5ac0d59b6ae5c0e92d6305942cc40a455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-48579

UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...

PT-2023-23334 · Prtg · Prtg

Name of the Vulnerable Software and Affected Versions: PRTG versions 23.2.84.1566 and earlier Description: A path traversal vulnerability was identified in the WMI Custom sensor where an authenticated user with write permissions could trick the sensor into behaving differently for existing files...

PT-2023-4963 · Clario · Clario Vpn Client

Name of the Vulnerable Software and Affected Versions: Clario VPN client versions 5.9.1.1662 and earlier Description: The issue concerns the insecure configuration of the operating system by the Clario VPN client, which results in traffic to the local network being sent in plaintext outside the V...

PT-2023-4448 · Avira · Avira Phantom Vpn

Name of the Vulnerable Software and Affected Versions: Avira Phantom VPN versions through 2.23.1 Description: An issue was discovered in Avira Phantom VPN where the VPN client insecurely configures the operating system, sending all IP traffic to the VPN server's IP address in plaintext outside th...

MAL-2023-1068 Malicious code in web3tool-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae905581e4e53e10b1d06262a96543b67f5f841e40d7723b81f455c968046cd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1066 Malicious code in web3tool-providers-ipc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45dd480c31cdb6a16b4c7308f724f05b190296dae7805a05b87ae74a81440fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1063 Malicious code in web3tool-eth-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12be8620708021936234e789248dd4ad0826cef81ef02171285815f476fb742 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-17469 · Amd · Radeon Software Crimson Relive Edition

Name of the Vulnerable Software and Affected Versions: Radeon Software Crimson ReLive Edition affected versions not specified Description: A potential issue was reported in Radeon Software Crimson ReLive Edition that may allow escalation of privilege. This software falls outside of the security...