Malicious code in openssl-node (npm)

This package executes a post-install script to collect system data and sends it to a remote server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06f19e257e800106253b9b27f14e1caac48d65284d85d47aa244d8aa9bfc97a8 Any computer that has this package installed or runni...

Malicious code in gateway-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d6360b401d42b11da348472e0339fbe582005453ec8f4aeb4b65eb7bb9cec17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a842b20c0aace9294c3d0326e85547c5bdf27e25347c8d744845f95f8d1374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12956

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /addachievementdetails.php. The manipulation of the argument achcerty leads to unrestricted upload. The attack may be initiated remotel...

Debian dla-3997 : php-illuminate-auth - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3997 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3997-1 [email protected] https://www.debian.org/lts/security/...

Malicious code in easytint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5495864d81fba85645e204088cd7376227401f94eb66f80f2189223f3e167b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uflexreward-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7379f8591040c92a4329b5312d80e8291304a7106cac2b41cb406b21a9e6b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron_npm_deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fab50ae8be78e8043fb45e594ddc2011c78115201e0697bcdf80e50f785a40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherscancontractinteraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9aa1dfa3873a9053735f5f55e19e500a9479df8c99b3b204aa81320b6aa2e34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11240

A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. The manipulation of the argument dbloginrole leads to cross site scripting. The attack may be...

Malicious code in ax-ntlm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4f424aab2dcc6cf1cd2739c30f2b94d2137b9bc89a91aa17b8071ec23370a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9841 OpenText ArcSight Management Center and ArcSight Platform Stored XSS

A Reflected Cross-Site Scripting XSS vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited...

CVE-2024-9841

OpenText ArcSight Management Center and ArcSight Platform are affected by a Reflected Cross-Site Scripting (XSS) vulnerability. The issue could be remotely exploited and is documented with XSS in multiple sources. The vulnerability affects ArcSight Management Center/ArcSight Platform; root cause ...

Malicious code in client-req-scopes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b46412fce5fe330212b43b8bb638bc55056c4d72aee91074e21429f921e46232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e01b5c7e434c166fc697d6c13f5aee669e57506125bea0d9639ef863220d2076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puppeteer-harr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb0fdb355ff7883bbc36ecd97a4dc5c58f9f6db5c0a97abad523aae554b279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupetier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17ed1e8a0a9a3d6f3fb16f3ca3a66b00b5f3f91c2fbf9bfa4688339f40e1d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visma-connect-bv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005faae12170fc7458fde90c1e389106818e875219f93719065488d5f10ff95a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csm-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d16c1d6eb0822be5e65caced92f56b1f6160e2fafc6343c11694ce4eca80c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...