Malicious code in valida-bepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a800b30f2110accfe121855b537578c4a8155e993dcb5547017d34352fdc1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airtable-blocks-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a563df0782e092825d76e13be3d7f6df53a01cb0afe716bdc6a1bbe63692f9d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openidconnect.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25c68fdbe733e629344de7da078e67668a22362f0be388e127a2d2b603dabd43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-authz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5de2600b08c1473abec0bac3c49bbcd4fa9626350cd3eb9c2d325cda30b0381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-method-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60414121dfe5a164bd132ab93d581199d55ba6bff4e937c7b52ecf6ca5fa1e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

LINQPad Deserialization Exploit

This module exploits a bug in LINQPad up to version 5.52.00. The bug is only exploitable in paid version of software. The core of a bug is cache file containing deserialized data, which attacker can overwrite with malicious payload. The data gets deserialized every time the app restarts. Module...

CVE-2024-6364

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

CVE-2024-6364

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

CVE-2024-6364 Server Identity Validation Bypass in Absolute Persistence®

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

CVE-2024-6364 Server Identity Validation Bypass in Absolute Persistence®

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device...

CVE-2024-6364

CVE-2024-6364 : Absolute Persistence® versions before 2.8 are vulnerable when “not activated.” A skilled attacker with physical device access and full hostile network control can initiate OS commands on the device. Remediation is to update the device firmware to the latest available version; cont...

Absolute Persistence BIOS Module Vulnerability - Lenovo Support US

No description provided...

Absolute Persistence BIOS Module Vulnerability - Lenovo Support US

No description provided...

Malicious code in sw-cur1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a28bc06bd5eab5a2d0c4613164a21a634b106c634b5a7610d1e5a0410119553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-20891

Name of the Vulnerable Software and Affected Versions Bosch Infotainment ECU versions affected versions not specified Description A flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue is due to a lack of proper boundary validati...

PT-2025-20887

The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS is used for communication with the back-end server. Due to usage of the default configuration for the underlying SSL engine, the server...

Absolute Persistence 安全漏洞

Absolute Persistence is a factory-embedded technology from Absolute that enables endpoint security resiliency. A security vulnerability exists in versions prior to Absolute Persistence 2.8 that stems from an inactive state that could allow an attacker with physical access to the device to execute...

PT-2025-20934 · Absolute Security · Absolute Persistence

Name of the Vulnerable Software and Affected Versions: Absolute Persistence versions prior to 2.8 Description: A vulnerability exists in Absolute Persistence when it is not activated, potentially allowing a skilled attacker with physical access to the device and full hostile network control to...

Malicious code in just-a-cute-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762fbe2f0398f3fba03f9f919ed353d349802e39e0942990e4434ec4ddc9c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...