MAL-2022-4441 Malicious code in lznfjbhurpjsqmr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84cad4351952e62a1d1e3e8fcafb3141058e13fdecfb1f62d7926c0e83bb37bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-699 Malicious code in @usabilityhub/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5857a4f72c6aaf7c0cefb3923fbaf549ee2987c6f8be4a526632caea6e2db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-581 Malicious code in @serenityos/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860522512ac1f1260a5979dc6e74f18950916a0870e4866d18ebb807d636d2ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-512 Malicious code in @pornhub/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df5687d89b807e9beb75e589da4d79603bbdc93f47e6aba7fa1d799724fdb781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-483 Malicious code in @openu/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db6096d7e8873db61c386340fc5340a2c1dd259a89b287250ab065e4d8646002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-407 Malicious code in @maariv/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44152863a6191cb2b219d60ac5f87ffba9ed77691affb59704f78501bdbb0d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4572 Malicious code in metamask-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61c1b1a606468376d3cb2a636e220c258458fdc1f12980fc4d21644b7f6197b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6753 Malicious code in ui-extensions-dev-console-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f16840f7273c569f73bfa9dbed041fcb7c6e26a8ae579a37e2a293da82a7aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-413 Malicious code in @manomano-toolbox/catalog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 710708eb64cdd24b39815c91bcdceb54510a8c06f3576ad492d96dd0eb259413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7392 Malicious code in zilliqa-token-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8c2e147930c89e1cb1f2017aa92d3c015029eaaf2f85f1d6163453cf03934f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2889 Malicious code in even-more-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d88bdc74cdae01727c6412359657971e95af66b3580bb8c50c0a28540f34de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2441 Malicious code in dependencyconfusioncve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f1571706b5923d417912f59bcb0862e01319700f93b6207091157b72ede8982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Car owners warned of another theft-enabling relay attack

Tesla owners are no strangers to seeing reports of cars being tampered with outside of their control. Back in 2021, a zero-click exploit aided a drone in taking over the cars entertainment system. In 2016, we had a brakes and doors issue. 2020 saw people rewriting key-fob firmware via Bluetooth...

MAL-2022-232 Malicious code in @epc-apps/api-ingestor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1475080989244adedec56990b4f047611496dd13042e21b835e7a53d0e4e7fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

QNAP QTS Video Station Multiple Vulnerabilities (QSA-22-14)

QNAP Video Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:qnap:videostation"; if...

Hospital Management System SQL Injection Vulnerability (CNVD-2022-83601)

Hospital Management System is a hospital management system. A SQL injection vulnerability exists in Hospital Management System v1.0, which includes modules for patient information management, appointment services, and financial management. The vulnerability is related to the lack of validation of...

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

CVE-2021-38679

CVE-2021-38679 is an improper authentication vulnerability affecting QNAP NAS running Kazoo Server . The root cause is failure of authentication controls in Kazoo Server, which can allow an attacker to compromise system security. Affected versions include Kazoo Server up to and including 4.11.21,...