MAL-2024-7312 Malicious code in @zitterorg/odit-quae-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a6863141e10de31df53d6b76f269986aa270a6dcc60e893e80f528486437f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7158 Malicious code in @zitterorg/dignissimos-doloremque-magnam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87ebb1893495b74b563f0f42621c15a051580f9d0ddf7132cafbb8adaf49ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/placeat-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e140c5d10bf92587d1e454856c6c3366a04c59862e78ec07694ece8216b221 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7383 Malicious code in @zitterorg/soluta-ratione (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f04e734e586409723ed9e7aa7e2e25f82e9b4ddc2ae1c7516c625a49d7c4d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7179 Malicious code in @zitterorg/doloribus-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34fb51912ba01b7900c604fdeb94fd087dbf26c09d7e2c4601380eb736ac5a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7183 Malicious code in @zitterorg/dolorum-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503b16b5690e5bb3aadf1675d08d5a8fed3b302fa14ff95b2159f97571453ce8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7292 Malicious code in @zitterorg/neque-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9761c5a4b9900ee7e416481b60fe6f740ef64e181e6b5292f4f64de71f4bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7147 Malicious code in @zitterorg/cum-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383bfe6b92e014b975003a7f1578d4a9668f7546b8dfbd387e0c11ded1f9872b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7227 Malicious code in @zitterorg/illum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32caff8657900b7c01222734b8b0ec6082aba4dc59685cf974739f92d5cc53b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7096 Malicious code in msa-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed49b2fd60a4f02b928360047bfd5c5d86159fb1e1b86c27b528a72dda41151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

Malicious code in rb-info-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795c3e45bb638b1058118c99f65db4e6f84244a2af7acbb4d6bd09a19b94dca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1598 Malicious code in ozon-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a05e800a141f7c456358b5d20b4e3cebc65f9d0229d0024fae5b1e51ed1e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5124

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows a...

CVE-2024-5124 Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows a...

CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

MAL-2024-1468 Malicious code in @juiggitea/possimus-impedit-est-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aa1cde9fc39e1afc2e353d6b99a3cfedecde5d0345fc8f2b1e892473c054b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1435 Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...