Malicious code in catme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b5df44af9cbed7b8a7112f36f9c99b466e9143b36d62fd43e4caf480df811d0 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2024-12259 Malicious code in driftme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4db40025175947d42bcca75bc2f04d0dab05379e9e84108c40de1cda6a854604 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

MAL-2024-12230 Malicious code in catme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b5df44af9cbed7b8a7112f36f9c99b466e9143b36d62fd43e4caf480df811d0 Importing the module starts executing a remote script, as well as leaves a persitance in the .bashrc --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in cussionsbp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 944229b70b1df938c01b5e21ee9d7d8799d3e104488f5ed8669176a2851c3467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cbdc296029075a31aced0f56b22ed1082a7c6c0b9d80d0ed9ab47cb033d467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed14882788a195f53ca2f8fd7b9fbb85b2b2c9bafc04ef3f08b3cff3f6287e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-jsonwebtoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25abe83f5832dadd36db735f0f385e70d4f55987a913448a70c7df4ea1c28762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qvector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5975444a31f5301f722c9369788bb65fb29585198a447b93f144bdf5b4672dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

Malicious code in req-ip-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ccb3d9a195046654b07e64e09e577fa33552b38ebea8854c5fffc5fed5043f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ericsson Cradlepoint NetCloud Exchange 安全漏洞

Ericsson Cradlepoint NetCloud Exchange NCX is a unified WAN networking and security architecture from Ericsson, Sweden. A security vulnerability exists in Ericsson Cradlepoint NetCloud Exchange version 1.110.50, which stems from the presence of an insecure file and folder permissions vulnerabilit...

PT-2024-17372 · Unknown · Netcloud Exchange Client For Windows

Name of the Vulnerable Software and Affected Versions: NetCloud Exchange client for Windows version 1.110.50 Description: The NetCloud Exchange client for Windows contains an insecure file and folder permissions vulnerability. A normal user could exploit the weakness in file and folder permission...

Malicious code in seller-webchat-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b68c2b24c603c8d9041a3cd7aeefed0ea836500df679a24bc061241fec376a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bll-cerberus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e08f496a9d5a455fad139af738f3f152615e6fd7bdcbdf47a2b4bf5dafa5e2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-payment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 709cb7e0744137d61c11a1e3ecc2767e8cd4b90456a6910d32816e8285dc6c54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shop-market-uss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54d918200bb505e6aa723098cbe7ac5561cc35eb28097ea8968ddc037fd3018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transify-helper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe9a95aa86c804ea93c96457c3f8ef18a9415c888ae5921213386c8424038ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfms-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1421630b6d73de6a5bb1e9a21167b6334a1e1f630a2734a5418c33a45c178737 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...