Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

TPAS Log4Shell PoC This repository contains a Proof of Concep...

MAL-2024-9023 Malicious code in sbm-react-native-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e2afb605fb618703ab0a396b16a0194c7c92063c40e98058cb1e012dd9c283f The OpenSSF Package Analysis project identified 'sbm-react-native-sample' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

Malicious code in sbm-react-native-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e2afb605fb618703ab0a396b16a0194c7c92063c40e98058cb1e012dd9c283f The OpenSSF Package Analysis project identified 'sbm-react-native-sample' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

Malicious code in meraki-react-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c83f2848053884da4ed2503526a13acf16087c512c728e406200da4b78084d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9004 Malicious code in meraki-react-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c83f2848053884da4ed2503526a13acf16087c512c728e406200da4b78084d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8956 Malicious code in unguess-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c0670b47eb6c06abe309a5b09c95182ad516cd5127af1c04f5bc8dea0800994 The OpenSSF Package Analysis project identified 'unguess-react' @ 1.5.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in unguess-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c0670b47eb6c06abe309a5b09c95182ad516cd5127af1c04f5bc8dea0800994 The OpenSSF Package Analysis project identified 'unguess-react' @ 1.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8936 Malicious code in airwallex-platform-onboarding-sdk-demo-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 503945e9961e51c2bd3819eeedc20ff255058a1873baf46726c646e08f43e2f5 The OpenSSF Package Analysis project identified 'airwallex-platform-onboarding-sdk-demo-react' @ 1.0.0 npm as malicious. It is considered...

D-Tale Command Execution Vulnerability

D-Tale is the combination of a Flask back-end and a React front-end to bring you an easy way to view & analyze Pandas data structures. In dtale\views.py, under the route @dtale.route"/chart-data/", the query parameters from the request are directly passed into runquery for execution. And...

GHSA-FG5M-M723-7MV6 D-Tale Command Execution Vulnerability

D-Tale is the combination of a Flask back-end and a React front-end to bring you an easy way to view & analyze Pandas data structures. In dtale\views.py, under the route @dtale.route"/chart-data/", the query parameters from the request are directly passed into runquery for execution. And...

Malicious code in @maas-themes/eslint-config-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 76dd3e73ed32149194358782c120547fddea51353f2ed5f56384a8ff2f0e828c The OpenSSF Package Analysis project identified '@maas-themes/eslint-config-react-typescript' @ 3.1.4 npm as malicious. It is considered malicio...

Malicious code in react-rps-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11c1a1b418f9d157a025f06882888a1836ebd32d5cec473f4aca9c82cf8f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8061 Malicious code in react-rps-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11c1a1b418f9d157a025f06882888a1836ebd32d5cec473f4aca9c82cf8f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8037 Malicious code in prettier-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4241fd6088878cd356569ae38a56d91f4c9f0819334d7fdf2fd40546ea6143e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8032 Malicious code in eslint-config-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fda3631232466ff38fcdeac8d90d36bcfb72f632a3055055d5e0b19ef17b500b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8042 Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4241fd6088878cd356569ae38a56d91f4c9f0819334d7fdf2fd40546ea6143e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fda3631232466ff38fcdeac8d90d36bcfb72f632a3055055d5e0b19ef17b500b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

matrix-react-sdk (>=3.102.0-rc.0, <=3.106.0) potentially affected by CVE-2024-42369 via matrix-js-sdk (>=34.0.0, <=34.3.0-rc.1)

matrix-js-sdk NPM version =34.0.0, =3.102.0-rc.0, =3.106.0 Source cves: CVE-2024-42369 Source advisory: OSV:GHSA-VHR5-G3PM-49FM...