Malicious code in rb-info-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795c3e45bb638b1058118c99f65db4e6f84244a2af7acbb4d6bd09a19b94dca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1598 Malicious code in ozon-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a05e800a141f7c456358b5d20b4e3cebc65f9d0229d0024fae5b1e51ed1e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5124

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows a...

CVE-2024-5124 Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows a...

CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

MAL-2024-1468 Malicious code in @juiggitea/possimus-impedit-est-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aa1cde9fc39e1afc2e353d6b99a3cfedecde5d0345fc8f2b1e892473c054b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1435 Malicious code in @juiggitea/et-fugiat-dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69f13dd978f294e84f04073b38848ce840a3cdf529f9cc021425cbba996edc85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1408 Malicious code in @juiggitea/aperiam-aperiam-amet-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66deca8c80ee8c47f48cc07b18aa17d5676ceb0964fd672e95395ab7253d4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Insufficient Entropy In Random Number Generation

paragonie/randomcompat is vulnerable to insufficient entropy in random number generation. The vulnerability is due to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators CSPRNG involving opensslrandompseudobytes, which may compromise the security of generated random...

CVE-2023-47222

An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on...

CVE-2023-47222

CVE-2023-47222 affects the Media Streaming add-on and is described as an exposure of sensitive information vulnerability that could allow a remote attacker to compromise system security over the network. The vulnerability impacts versions prior to 500.1.1.5, with a fix released in Media Streaming...

CVE-2024-21905

CVE-2024-21905 is an integer overflow/wraparound vulnerability affecting QNAP QTS, QuTS Hero, and QuTScloud. The issue could allow an attacker to compromise the system remotely over the network. Affected/confirmed versions include QTS 5.1.3.2578 build 20231110 and later, QuTS Hero h5.1.3.2578 bui...

HackerOne: 2FA Bypass via Leaked Cookies

Vulnerability description not provided...

Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass

Summary Wayber II is the name of an analogue/digital microwave link able to transport a Mono or a MPX stereo signal from studio to audio transmitter. Compact and reliable, it features very high quality and modern technology both in signal processing and microwave section leading to outstanding...

Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Authentication Bypass

Summary The REBLE610 features an accurate hardware design, absence of internal cabling and full modularity. The unit is composed by a basic chassis with 4 extractable boards which makes maintenance and critical operations, like frequency modification, easy and efficient. The modular approach has...

MAL-2024-1230 Malicious code in @lbnqduy11805/refactored-octo-carnival (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae1452d962828880783e96a646a0aa0412ecbd05092f5b877b2e531626318be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-29024 JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the Insecure Direct Object Reference IDOR vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromisi...

MAL-2024-1115 Malicious code in bouncifyrn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8a85f882ffb78e888df96a302f0045437abb055dc3bae6e65703ac6bf4a7c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1125 Malicious code in sqltest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0190dbee55c45a7a0057b6566fdc39f65bf6d053ef4f271f95e532f6260a59b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1088 Malicious code in salesforce-service-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...