MAL-2024-11075 Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11001 Malicious code in scan-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ef4d9984cb1556d85ee7a49552a644920b953dfe2a86a1b22d190cdfce82a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11015 Malicious code in updasolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5019b6bb5f610407cab79430a7c13fe5f715daf02b6629d8945a69755c0fea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10960 Malicious code in dep-validator-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af93a927101a23e38ce34664c1c85dc8651f0e3a5a066ec9a110caabe4cadcbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10962 Malicious code in eds-charts-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2510990d3cbd74d80350268baeb27e8b73568fb0e64f3c83fd061ad4eda6f565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10940 Malicious code in nodmialer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f517fd7c243bbf2ebdbc660388ec85202c4ea31c094bc01cbb8b5ff4c0c7388f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2024-152 aiocpa 0.1.13 contains credential harvesting code

aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI...

MAL-2024-10930 Malicious code in ethcrypro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba9c04349ef6d36952c840a64414c794718cfd5fddd4f2c21355423bd6d36f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...

CVE-2024-52516 Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one of them

Nextcloud Server is a self hosted personal cloud system. When a server is configured to only allow sharing with users that are in ones own groups, after a user was removed from a group, previously shared items were not unshared. It is recommended that the Nextcloud Server is upgraded to 22.2.11 o...

Fedora 41 : opendmarc (2024-513cf04db3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-513cf04db3 advisory. - Fix for CVE-2024-25768 - Closes rhbz2266175 rhbz2266174 - Convert to %autorelease and %autochangelog - Simplify spec - Remove checks on if systemd is prese...

kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver in the w83791d module where the driver performs a read operation, which can result in a NULL pointer dereference. This occurs due to an unnecessary field lm75 that is no longer needed after updates to device handling functions, the driv...

kernel: wifi: mt76: mt7921e: fix use-after-free in free_irq()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in freeirq From commit a304e1b82808 "PATCH Debug shared irqs", there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For th...

kernel: blk-mq: fix tags leak when shrink nr_hw_queues

A memory leak flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When the number of hardware queues is reduced via the submitqueues parameter, the tags associated with the removed queues are not freed, causing a memory leak. This occurs because shrinking nrhwqueues does not...

tracing/timerlat: Drop interface_lock in stop_kthread()

...

MAL-2024-10507 Malicious code in ethens-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587aaeff09cedb01639d066a033a97d01f1137b14788e741c56f5801b6f38b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10493 Malicious code in 1234wdzwkcsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24a9740048ac983c055f06c0c70ef23cd9654f1afc41a6b809febf6ea84f4aa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2024-1731001050 Update of nss

update to CKBI 2.70 from NSS 3.104 - updated certificates: - Certificate "GLOBALTRUST 2020" - Certificate "certSIGN ROOT CA" - Certificate "ACCVRAIZ1" - Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - Certificate "Security Communication Root CA" - Certificate "Camerfirma...

MAL-2024-10522 Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10526 Malicious code in valomemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c766f5074a741d52acff64d70b735707af99e18eff8bd842be0d39ab5f138c0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...