PT-2023-9585 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions prior to WSA8835 Description: The issue is related to memory corruption that occurs when sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call. This can...

Amazon Linux 2 : redis (ALASREDIS6-2023-001)

The version of redis installed on the remote host is prior to 6.2.11-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2REDIS6-2023-001 advisory. Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted SETRANGE and SORTR...

Malicious code in @cat-abdulla/fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6756f1d86478050a5d2c651a1ef83e1f151c21b753785868a0beac0d401b3ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca_ivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0761e4cb4957c3cdb2da290303672b71412107a385cb36c4de428110178428ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in williams-quest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c31737ea0cc10de7ea3d9e48d1e5b6aad6efbf755ab10d4c64ca6eef9f8ebb3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-nguyen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325b1db59ef74456937dd3909ac729db47da97492af691b2b78469589bf5bd6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-animate-cjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 516c8dd53eb3c24c892eed50063a6f315dc748a4d2f006d392d7ec6785802d0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kubernetes security update

kubernetes 1.25.11-1 - Added Oracle specific build files for Kubernetes olcne 1.6.2-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x 1.6.1-9 - Updated the CVE ID's in Istio-1.16.4 changelog entry 1.6.1-8 - Update Istio...

CVE-2023-21135

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Input validation

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Malicious code in legal-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 889df12ead796af3e20b965b76b67dd029c687100599b2435933f0c7e82e8f53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in most-of-all-you-a-love-story-by-mia-sheridan-on-audible-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c4a6b517453939c6726b561eb2db29c64d194a0363b67ffc3cba22564b4fb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eagleshotelcaliforniamultitrackflac_top__k3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a87cdadc6c6aeb8ba78b9a321b5251a946cc6483fcfb3e93847b59d81cb33fef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noor_ul_iman_tarjuma_quran_pdf_free_free__kv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c6edd2df35820cb6c1d38a3fe06c9c836fe349e1aaacbc55af1a13620d4a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pcorbr-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c2ab222c8542659c5bf7b3e2daeea4be95818c1e0d0c186b7bce8abfa462a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-ainzfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d695d1fdd007ab16da46aac5cbde2e0bb0f1739b4468138f4f7278653df4bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoodotcom-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb0a9ae16cfadd970962e84bc11d082b5a7354335f88909193d51c5a759a1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ed9a83072029828451c3aa68fec9a49ec55530b597b59576b0a8c497776385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...