MAL-2024-11968 Malicious code in dhp-http-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3bd8d790ed5b426b7b312480732dc8343670572c60141f63f9a0d7df7b8efe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11902 Malicious code in downloadsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fde9e23e5d6faf3807847475feb0e29efe5c2d51f5350cbcca42a0024945c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48865 QTS, QuTS hero

An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with local network access to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2024-48859 QTS, QuTS hero

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 bui...

CVE-2024-48859 QTS, QuTS hero

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 bui...

MAL-2024-11198 Malicious code in web3-executor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfb15a3594feacf82b4c6e07454995ac76d0913c2b16caadc5eb306b6050723 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11041 Malicious code in gaming_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f300010193f83d2adba7d5cf4a6e9ebf54f0e40c67e1ac0fc99f5255bdfa53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11044 Malicious code in item-card-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81192c32a32a9e65a9df93f0952d9c598fd305d701d0495d10d44368c38f291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10998 Malicious code in rct-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc6a8e05244932d5a9c6a3e845c59c4313f962558c160bf03c579325473646d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10997 Malicious code in rc-tabs-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f90b5d41526dccacbdf635d3204ba25959ff285e798f1295c1729d0078b29f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10985 Malicious code in kraken-wallet-network-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac2acbbbff3feba97534f39d0555e145ac5994c2dcf5b5726f1002a09f5e6de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38647

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

BIT-AIRFLOW-2024-45784 Apache Airflow: Sensitive configuration values are not masked in the logs by default

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially...

Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45784 Apache Airflow: Sensitive configuration values are not masked in the logs by default

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially...

Malicious code in mkt-snakecase-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61e863528bc4c149274dad3b83fb474326e0d0d2ab5134d9529c0099688515e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10609 Malicious code in bitcore-mnemoic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab9b0ec80242884d35432aaa1d154e06c0b6b7e99cff7afcbd8f4834cb9d584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10625 Malicious code in web3-bundle-helper.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729e976ca90d0da39690eb9bc2f2a5a14b9e029246f0ea555031156fed4114d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...