MAL-2023-331 Malicious code in fc-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deda6264abf52468856de6a91a887594ca7b427f7093f2486999d3323f096408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-352 Malicious code in fc-iban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835c3aed532f26ad6a891ed3275291ab1fda39d7c0a7e81d5420062466a514aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-902 Malicious code in trint-bbc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f755e08a2f5b395630482a2784cdf65bd712c263238d4df7302e087c47be52e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-515 Malicious code in idgit-conventional-commitsentity-obj-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e21720cf9a4946dccc8cfaf2aeecb605fa378ec130a4c251054a6867ebd163ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-706 Malicious code in prpostcss-loaderetty-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee67ba2a4127a635013cb8ab79bc1d748c3756aeb2271056f1a97d70a21d4b2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

KylinSoft youker-assistant 路径遍历漏洞

KylinSoft youker-assistant is a system management and configuration tool from KylinSoft China. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23. An attacker could exploit the vulnerability to access files and directories stored outside of the web...

MAL-2023-740 Malicious code in reat-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a3d57163b34785a2092a45dcf9e0e1601b827c144a5a955212214317de9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easy-lightbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539cde116686125274f12080c38227ec92eb6caba54c38acc1f72cedab4a69a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-299 Malicious code in easy-lightbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539cde116686125274f12080c38227ec92eb6caba54c38acc1f72cedab4a69a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents

A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to git apply --reject; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunks from the given patch...

ASUSTOR Data Master 路径遍历漏洞

ASUSTOR Data Master is an operating system exclusively on the ASUSTOR NAS from China's ASUS, featuring a tablet-like graphical interface comparable to a zero-learning curve, making it easy to get started right away. A security vulnerability exists in ASUSTOR Data Master ADM that stems from an...

The vulnerability of the built-in software of the ARIS controller, related to reading data outside the buffer in memory, allows a intruder to perform a service failure.

The vulnerability of the built-in software of the ARIS controller is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to perform a service failure through a specially crafted request...

MAL-2023-708 Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pruebalol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd33e19a8d7f91573d342ed9810411e553657b41394227fd9e33600c45e8f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-682 Malicious code in pitito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c402c7c9c4bff455910dd1b71d4c8d9cb7e47b0daa68d4d68eedf1649965afb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32676 Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install assessment functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...

PT-2023-23952 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab versions prior to 2.11.0 Description: A Tar slip vulnerability was found in the Install assessment functionality of Autolab, a course management service for auto-graded programming assignments. To exploit this issue, an authenticated...

MAL-2023-942 Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-203 Malicious code in compute-starter-kit-assemblyscript-default (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d22fdf2ac6654a503fea802f494a8beb6fecb1b7b953919da1d01cd04e133958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-77 Malicious code in actblue-contributions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c0c6e92bdaf9e2ee8c02ef7116bf05898e212a64ff12c21e8990a350ee768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...