Improper Validation Of Integrity Check Value

org.apache.sshd, sshd-common is vulnerable for Improper Validation Of Integrity Check Value. The vulnerability is due to the possibility of packet interception, where an attacker can intercept traffic between the client and server and drop certain packets from the stream, potentially downgrading ...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6952-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6952-1 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and...

CVE-2024-41947

CVE-2024-41947 affects XWiki Platform. When a conflict arises while a user with higher rights is editing a page, it can allow execution of JavaScript on the other user’s browser, compromising confidentiality, integrity and availability of the installation. The issue has been patched in XWiki vers...

MAL-2024-7804 Malicious code in floodtcpudp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a611aa867ba38df3df7fa580801761c47bd580ea1466bee912946e7b0dcca80b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7766 Malicious code in selfbot.js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdb151c00154198176313030563b649e051266589b603c6f66325730afa5d5d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7429 Malicious code in css-rule-extractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e9ced95ce8313baa1160e05f65af9e6247750f6dbd09fcaf40d1ded1874a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7312 Malicious code in @zitterorg/odit-quae-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a6863141e10de31df53d6b76f269986aa270a6dcc60e893e80f528486437f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7255 Malicious code in @zitterorg/laudantium-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c5bd5068f580898f9c25ecc5ff020dab5a18774662f215e68cd4f21deb07cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/placeat-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e140c5d10bf92587d1e454856c6c3366a04c59862e78ec07694ece8216b221 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7158 Malicious code in @zitterorg/dignissimos-doloremque-magnam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87ebb1893495b74b563f0f42621c15a051580f9d0ddf7132cafbb8adaf49ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7383 Malicious code in @zitterorg/soluta-ratione (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f04e734e586409723ed9e7aa7e2e25f82e9b4ddc2ae1c7516c625a49d7c4d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7179 Malicious code in @zitterorg/doloribus-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34fb51912ba01b7900c604fdeb94fd087dbf26c09d7e2c4601380eb736ac5a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7183 Malicious code in @zitterorg/dolorum-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503b16b5690e5bb3aadf1675d08d5a8fed3b302fa14ff95b2159f97571453ce8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7147 Malicious code in @zitterorg/cum-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383bfe6b92e014b975003a7f1578d4a9668f7546b8dfbd387e0c11ded1f9872b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7292 Malicious code in @zitterorg/neque-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c9761c5a4b9900ee7e416481b60fe6f740ef64e181e6b5292f4f64de71f4bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7227 Malicious code in @zitterorg/illum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32caff8657900b7c01222734b8b0ec6082aba4dc59685cf974739f92d5cc53b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7096 Malicious code in msa-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ed49b2fd60a4f02b928360047bfd5c5d86159fb1e1b86c27b528a72dda41151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...