MAL-2024-11044 Malicious code in item-card-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81192c32a32a9e65a9df93f0952d9c598fd305d701d0495d10d44368c38f291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10998 Malicious code in rct-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc6a8e05244932d5a9c6a3e845c59c4313f962558c160bf03c579325473646d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10997 Malicious code in rc-tabs-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f90b5d41526dccacbdf635d3204ba25959ff285e798f1295c1729d0078b29f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10985 Malicious code in kraken-wallet-network-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac2acbbbff3feba97534f39d0555e145ac5994c2dcf5b5726f1002a09f5e6de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38647

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

BIT-AIRFLOW-2024-45784 Apache Airflow: Sensitive configuration values are not masked in the logs by default

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially...

Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45784 Apache Airflow: Sensitive configuration values are not masked in the logs by default

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially...

Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10609 Malicious code in bitcore-mnemoic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab9b0ec80242884d35432aaa1d154e06c0b6b7e99cff7afcbd8f4834cb9d584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10625 Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10537 Malicious code in bitg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5873ad35787d629fabac94d5b65ecbfa902739a18c0c003be4656859afd38c92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10439 Malicious code in trufel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d86a742d041b19705edba4466a1fbcb6df551d110ed63b40b34e222b6e8821e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51381

Cross-Site Request Forgery CSRF vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts. This critical flaw can lead to unauthorized activities, compromising the security and integrity of the platform, especially if an...

CVE-2024-51362

The CVE-2024-51362 entry affects LSC Smart Connect Indoor IP Camera V7.6.32. The Red Hat NVD references and other sources confirm an information-disclosure flaw where live footage can be accessed via RTSP on port 8554 without authentication, enabling unauthorized network access to the camera feed...

CVE-2024-51381

Summary: CVE-2024-51381 is a CSRF flaw in JATOS v3.9.3 that lets attackers perform administrator-only actions, including creating admin accounts. The Red Hat, NVD, OSV, CNNVD, and CVE records corroborate the issue across sources. Affected component/version: JATOS 3.9.3. Root cause / nature: Cross...

MAL-2024-10341 Malicious code in puppeteer-extra-stealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37fbc6ab229a243ce69502d1a45b114b8b4c6318a961389367378d664f35b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9362 Malicious code in down-load-available-zip-now-365509-chew-the-scenery-ymqd7-xaqqmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39470e2ad654687e0841bb2740b376632c07ad817ddd755c4037149fb3872220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...