Malicious code in eslint-config-finance-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85a546df8d0ede4998d3278f908eda1a58e6e6da031d4d5f686ecbde85680d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@airgap/beacon-sdk (>=0.0.1 <=0.0.3-beta.9), @altispeed/rn-matrix-core (>=0.0.34 <=0.0.36) +56 more potentially affected by CVE-2024-42369 via matrix-js-sdk (>=0.0.4 <=34.3.0)

matrix-js-sdk NPM version =0.0.4, =0.0.1, =0.0.34, =1.3.0, =1.0.0, =2.0.0, =2.0.0-alpha.3, =2.0.0-alpha.1, =1.4.1, =0.0.1, =0.0.0-development, =0.1.0, =0.17.0, =4.0.1, =0.3.1, =0.8.0 and more Source cves: CVE-2024-42369 Source advisory: OSV:GHSA-VHR5-G3PM-49FM...

Malicious code in rn-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2965 Malicious code in rn-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

rnwinery.co.il Cross Site Scripting vulnerability OBB-3905374

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-5824 Malicious code in rn-amazon-payment-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55dc607d7f550e21e91f6f04e1b1aed4b17e87f68d49c8f20d4fd3f413cbcc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in expect-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dddc16d429ca24450b0b94d22daaf92e3b7241bb97b6e581be963a7bfe13c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2920 Malicious code in expect-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dddc16d429ca24450b0b94d22daaf92e3b7241bb97b6e581be963a7bfe13c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7112 Malicious code in wechat-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e869f3410b7769bc139296cbdc4a1f7b42e50157e39cbddb01328611883ca7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

copa2014.natal.rn.gov.br Cross Site Scripting vulnerability OBB-2510736

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

compras.natal.rn.gov.br Cross Site Scripting vulnerability OBB-2485604

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leideacesso.natal.rn.gov.br Cross Site Scripting vulnerability OBB-2473157

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nataldagente.natal.rn.gov.br Cross Site Scripting vulnerability OBB-2473153

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vacina.natal.rn.gov.br Cross Site Scripting vulnerability OBB-2461795

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MariaDB 10.5.0 < 10.5.11 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.11 advisory. - MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

MariaDB 10.3.0 < 10.3.30 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.30. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.30 advisory. - MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

rn-chain.ru Cross Site Scripting vulnerability OBB-1325149

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

@amazingcat/amazing-iohook (>=7.1.4 <=8.1.1), @barajs/electron (>=1.0.0 <=1.0.2) +30 more potentially affected by CVE-2020-15096 via electron (>=7.0.0 <=7.2.3)

electron NPM version =7.0.0, =7.1.4, =1.0.0, =0.0.3, =0.3.0, =4.0.0-alpha.3, =7.0.0, =4.0.0-alpha.1, =0.0.1, =7.0.0, =1.7.0, =7.0.0, =8.0.0, =0.31.0-alpha.2, =0.31.0-alpha.33 and more Source cves: CVE-2020-15096 Source advisory: OSV:GHSA-6VRV-94JV-CRRG...

CVE-2017-15865

CVE-2017-15865 affects FRR (bgpd) in FRRouting before 2.0.2 and in 3.x before 3.0.2, used in Cumulus Linux before 3.4.3. A malformed BGP UPDATE from a connected peer can trigger transmission of up to thousands of unintended bytes, causing information disclosure. The issue stems from mishandled at...