MAL-2024-281 Malicious code in wlwz-2312-1203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84e04c90cf0ae007bb5d45d3c44555ed1238647d8616732ee294852cd57ae3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Orthanc Security Breach

Orthanc is a free and open source software from Orthanc. A security vulnerability exists in versions of Orthanc prior to 1.12.2 that stems from vulnerability to reflective cross-site scripting XSS attacks...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

Hewlett Packard Enterprise OneView Security Breach

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise USA that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that originates from a vulnerability that could allow authentication to be...

Apple tvOS Security Breach

Apple tvOS is an operating system for smart TVs from Apple. A security vulnerability exists in Apple tvOS version 17.3, which originates from an application that may be able to execute arbitrary code using kernel privileges...

a-blog cms security breach

a-blog cms is a Japanese content management system CMS. A security vulnerability exists in a-blog cms, which stems from a relative path traversal vulnerability that could allow an attacker to delete arbitrary files on the server...

Apple tvOS Security Breach

Apple tvOS is a smart TV operating system from Apple. A security vulnerability exists in Apple tvOS version 17.3, which stems from an application that may be able to access sensitive user data...

Splunk Security Breach

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Fedora 39 : pgadmin4 (2024-9818cb2406)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9818cb2406 advisory. Fix CVE-2023-26159. ---- Relax requirements. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

Embedchain Security Breach

Embedchain is an open source RAG framework from Embedchain Open Source. A security vulnerability exists in Embedchain versions prior to 0.1.57. An attacker can exploit this vulnerability to execute arbitrary code related to the parameters of the openapi.py yaml.load function...

European Chemicals Agency IUCLID Security Breach

IUCLID is a software application organized by the European Chemicals Agency. It is used to capture, store, maintain and exchange data on the intrinsic and hazardous properties of chemical substances. A security vulnerability exists in European Chemicals Agency IUCLID version 7.10.3, which...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the...

Ethereum blockchain security breach

Ethereum Blockchain is a decentralized open source public blockchain platform with smart contract capabilities from the Ethereum Foundation. A security vulnerability exists in Ethereum blockchain that stems from incorrect access control contained in UniswapFrontRunBot, which could lead to financi...

ClickHouse Security Breach

ClickHouse is ClickHouse's fastest and most resource efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse. An attacker exploited the vulnerability to gain access to client certificate passwords via client-side exception logs...

Lenovo Tablet Security Breach

Lenovo Tablet is a series of tablet computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Tablet, which stems from a privilege escalation vulnerability. The vulnerability could allow a local application to access device identifiers and system commands...

Skoda Security Breach

Skoda is a line of automobiles from Skoda Inc. A security vulnerability exists in Skoda Automotive that originates from allowing access to user nicknames and identifiers by specifying arbitrary vehicle VIN numbers...

Webkul QloApps Security Breach

Webkul QloApps is free open source hotel booking and online reservation system. A security vulnerability exists in Webkul QloApps versions prior to v1.6.0, which stems from a vulnerability that allows an attacker to obtain sensitive information via the idorder parameter...

marinesmemorial.org Cross Site Scripting vulnerability OBB-3835971

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hyperledger Ursa Security Breach

Hyperledger Ursa is a Hyperledger open source cryptographic library for use with blockchains. A security vulnerability exists in Hyperledger Ursa versions prior to 0.3 that stems from a lack of checking the correctness of CL signature issuer keys...

StackIdeas EasyDiscuss Security Breach

StackIdeas EasyDiscuss is an extension from StackIdeas, Inc. A security vulnerability exists in StackIdeas EasyDiscuss version v.5.0.5, which stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via a crafted request...