Malicious code in internal-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a6bd675ea3b0d59c2be36d20bbc131840884f76941be3816dcbcb662b9b5c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solara-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c4278b58b290241d9ef295a9ceda4083285189698be34585555b85f49c7918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron_npm_deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fab50ae8be78e8043fb45e594ddc2011c78115201e0697bcdf80e50f785a40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextcloud2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

frood, an Alpine initramfs NAS

My NAS, frood, has a bit of a weird setup. It’s just one big initramfs containing a whole Alpine Linux system. It’s delightful and I am not sure why it’s not more common. As long as the bootloader can find the kernel and initramfs, the machine comes up cleanly. A/B deployments and rollbacks are...

Malicious code in driftme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4db40025175947d42bcca75bc2f04d0dab05379e9e84108c40de1cda6a854604 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in catme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b5df44af9cbed7b8a7112f36f9c99b466e9143b36d62fd43e4caf480df811d0 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2024-12259 Malicious code in driftme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4db40025175947d42bcca75bc2f04d0dab05379e9e84108c40de1cda6a854604 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2024-12230 Malicious code in catme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b5df44af9cbed7b8a7112f36f9c99b466e9143b36d62fd43e4caf480df811d0 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in cussionsbp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 944229b70b1df938c01b5e21ee9d7d8799d3e104488f5ed8669176a2851c3467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed14882788a195f53ca2f8fd7b9fbb85b2b2c9bafc04ef3f08b3cff3f6287e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cbdc296029075a31aced0f56b22ed1082a7c6c0b9d80d0ed9ab47cb033d467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-jsonwebtoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25abe83f5832dadd36db735f0f385e70d4f55987a913448a70c7df4ea1c28762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qvector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5975444a31f5301f722c9369788bb65fb29585198a447b93f144bdf5b4672dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

Malicious code in req-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ccb3d9a195046654b07e64e09e577fa33552b38ebea8854c5fffc5fed5043f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ericsson Cradlepoint NetCloud Exchange 安全漏洞

Ericsson Cradlepoint NetCloud Exchange NCX is a unified WAN networking and security architecture from Ericsson, Sweden. A security vulnerability exists in Ericsson Cradlepoint NetCloud Exchange version 1.110.50, which stems from the presence of an insecure file and folder permissions vulnerabilit...