Malicious code in crypt-research (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 488cc5e5910fdc7c554f6c3b87979d4abe9cd560a718f367505c58d4ffec25d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A vulnerability in the web interface for managing SINEC INS software, which manages network infrastructure, exists. This vulnerability is related to an incorrect session expiration time, allowing attackers to maintain a session after deleting the account.

The vulnerability in the web interface for managing SINEC INS software-related network infrastructure is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor to maintain a session after deleting the account...

Malicious code in clement-malicious-npm-package-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d9e98897d5870d3d52c1ba33f179ba6ef1b3329f46888535d674feda935d87c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tetherr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd5e0fe6db1c8397fd9456015cdf14d4ef9f338816dc771cfd8ec9e013fb889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tehter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9947da85637a8b657c770fb0b61ce650c78b0683fab7f45fe3c41a9c26ca6fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lito-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6cf4549a9eb56f566a4f9b2f25568406b0ba7ed7d72c19ef13a615c6c0cdffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bcoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f8b3904e1fbb296966df640e4cf438e617ed0abae2e9fe08cc2423c249d233 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-WPVF-5MC3-HV6M Duplicate Advisory: Querydsl SQL/HQL injection

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6q3q-6v5j-h6vg. This link is maintained to preserve external references. Original Description Querydsl 5.1.0 allows SQL/HQL injection in orderBy in JPAQuery...

Querydsl 安全漏洞

Querydsl is a framework from the Querydsl open source that supports building type-safe SQL-like queries for multiple backends. A security vulnerability exists in Querydsl version 5.1.0 that stems from allowing SQL or HQL injection in orderBy in JPAQuery...

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2024-49039, a vulnerability in Windows Task...

Malicious code in seller-fulfillment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ebc5b94723310fdc818906683b92c5de92b31571f86799a4a51a25af391ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22ab4bb324e80480b0e44f7b95467dbf74c8dfcc8d6295798e4b298abd223158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scm-retail-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5c9460f2f7b76b7df92b6f3c8f8237b18cac972b6424471eae0ccd9c78963d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cb-cookie-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e21db163fcf5bd372c2a214576f2018fdca3221ae4ca1a4ed936a02d013c782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axios-mockadptr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e64ef7d0e28707dcceed8016121547c9232833f50b9ead795de4f4fa4d4a282 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocktp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b55d23fdb36bab61a6449aff71690d445a015bf0dfe059c796ecdb6ca1c784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6020c72434d3e7647714902b693a6b7724105d815480ccd6ea906112b33e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axios-cookiesupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55368b5538a85341f64d31000a87573fb8c111b30fee01091ef7040841955a04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

firefox: thunderbird: Clipboard "paste" button persisted across tabs

The Mozilla Foundation's Security Advisory: A clipboard "paste" button could persist across tabs which allowed a spoofing attack...

Malicious code in styledcomps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b781ebb0b45a144ec6fcef9fc79b3304f5420286bc6d38b2a73a0c21830194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...