MAL-2024-8489 Malicious code in @diotoborg/occaecati-quibusdam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5cf48e4c7aac829bb4ba841a50e10d9d62012947f59565c0af9b570c4765c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8171 Malicious code in @diotoborg/beatae-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2144a6481af3dadf78d8903575c2769b737f11a76e4e98b963ef7d988820905f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8293 Malicious code in @diotoborg/esse-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10e40f44d35237a4185dcd9dcfb2b5c42576fee529422393e00a6745855d9052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8163 Malicious code in @diotoborg/autem-dolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64c1625354d1f6f713c3e11ea7fd948ec9f3ec2bfd8e7eb514a4b8b443fc8bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8684 Malicious code in @diotoborg/vero-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fb2e8e4a6349f91a258ae73ba115417262626ce8cbaea20f02605963832fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8655 Malicious code in @diotoborg/temporibus-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ce0abddcbedfbdf7fc948b35890f2b3f206a1beb7f9c851f3adf9516aaf3843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8138 Malicious code in @diotoborg/architecto-quis-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 816ba768980666c6d91c009857257420aaf4e8226c8ea5d292c8bf0041d4c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8137 Malicious code in @diotoborg/architecto-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c5b3d018443809c41d6f30feea371a3ae19082306ba345ca8a475edad5be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8203 Malicious code in @diotoborg/cum-illum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f83e9fe6ebfbe1d3347d2fe4fd6b9c4a54f4cb82b292187610dbc94713ffb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8349 Malicious code in @diotoborg/harum-nesciunt-dolores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0a4ec64db17e0dd47d89722dc0d30cd003ed2c3c8336940cf7387df61827ea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8559 Malicious code in @diotoborg/quia-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61727070a6eb33dd49395695146cd5f8370da804f624957433b2a75b1d17b20f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8096 Malicious code in kak-kupit-kriptovaliutu-v-rossii-cherez-tinkoff-investitsii-s21dt6n0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722439ce10201bd57480a22eff49b9404dd698bbc8e34f901c4259142722a1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6633

The default credentials for the setup HSQL database HSQLDB for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate...

Improper Validation Of Integrity Check Value

org.apache.sshd, sshd-common is vulnerable for Improper Validation Of Integrity Check Value. The vulnerability is due to the possibility of packet interception, where an attacker can intercept traffic between the client and server and drop certain packets from the stream, potentially downgrading ...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6952-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6952-1 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and...

CVE-2024-41947

CVE-2024-41947 affects XWiki Platform. When a conflict arises while a user with higher rights is editing a page, it can allow execution of JavaScript on the other user’s browser, compromising confidentiality, integrity and availability of the installation. The issue has been patched in XWiki vers...

MAL-2024-7804 Malicious code in floodtcpudp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a611aa867ba38df3df7fa580801761c47bd580ea1466bee912946e7b0dcca80b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7766 Malicious code in selfbot.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb151c00154198176313030563b649e051266589b603c6f66325730afa5d5d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7429 Malicious code in css-rule-extractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e9ced95ce8313baa1160e05f65af9e6247750f6dbd09fcaf40d1ded1874a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7255 Malicious code in @zitterorg/laudantium-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c5bd5068f580898f9c25ecc5ff020dab5a18774662f215e68cd4f21deb07cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...