CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

Malicious code in req-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ccb3d9a195046654b07e64e09e577fa33552b38ebea8854c5fffc5fed5043f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ericsson Cradlepoint NetCloud Exchange 安全漏洞

Ericsson Cradlepoint NetCloud Exchange NCX is a unified WAN networking and security architecture from Ericsson, Sweden. A security vulnerability exists in Ericsson Cradlepoint NetCloud Exchange version 1.110.50, which stems from the presence of an insecure file and folder permissions vulnerabilit...

PT-2024-17372 · Unknown · Netcloud Exchange Client For Windows

Name of the Vulnerable Software and Affected Versions: NetCloud Exchange client for Windows version 1.110.50 Description: The NetCloud Exchange client for Windows contains an insecure file and folder permissions vulnerability. A normal user could exploit the weakness in file and folder permission...

Malicious code in seller-webchat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b68c2b24c603c8d9041a3cd7aeefed0ea836500df679a24bc061241fec376a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bll-cerberus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e08f496a9d5a455fad139af738f3f152615e6fd7bdcbdf47a2b4bf5dafa5e2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-payment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 709cb7e0744137d61c11a1e3ecc2767e8cd4b90456a6910d32816e8285dc6c54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shop-market-uss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54d918200bb505e6aa723098cbe7ac5561cc35eb28097ea8968ddc037fd3018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transify-helper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe9a95aa86c804ea93c96457c3f8ef18a9415c888ae5921213386c8424038ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfms-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1421630b6d73de6a5bb1e9a21167b6334a1e1f630a2734a5418c33a45c178737 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-prom-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00399342fd828bf3305571f803a862bf442f1d4800ca6da0c85756aae3d662ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-loan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86fed95ad3b55d8489ab32dd4ca52c717780e5c1e8610e7cbbe76981e9581fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multi-module-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39776c52c5a6a5c6f0a98f7fe10de67a9df1af23b6ee9f5015566a8bb718837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cmt-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 586a5877b5aa7d86a690dc73524f7fa5d152a4c1fbd72cfb435080e3b5f5fecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web_enhance_sap-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1166fb5c2d52c1441f6a01e18fa740ebce1a9f89427d2f5211a45eeadba3cb88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xenoupdater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a11b67eabd1e2cf8e087541746de507bf4086496e7f122ef544b0e1a91a2053e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updasolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5019b6bb5f610407cab79430a7c13fe5f715daf02b6629d8945a69755c0fea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malicious_sleep_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c56c5bd22f8ceb0fc4fb9fb6e616b108f88768dcd68a73feaaf4de3ea4ba2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tc-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aa4df0e0793a036928e9181dd63ce9ef72640ebfe8a24284931247421024729 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...