MAL-2024-1088 Malicious code in salesforce-service-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Access Control

ipmctl is vulnerable to Improper Access Control. The vulnerability due to lack of proper access controls means that an authenticated user could gain unauthorized access to certain functionalities or perform actions. It allows an attacker could gain higher levels of access or control over the...

Medium: edk2

Issue Overview: EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

CVE-2024-24830 OpenObserve Privilege Escalation Vulnerability in Users API

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A vulnerability has been identified in the "/api/orgid/users" endpoint. This vulnerability allows any authenticated regular user 'member' to add new users with...

CVE-2024-25140

A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing 1.3.6.1.5.5.7.3.3, valid from 2023 until 2033. This is potentially unwanted, e.g., because there is no public documentation of...

Authentication flaw

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

MAL-2024-930 Malicious code in iifl_android_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156d2f7b729ecde4e57d57d93bf3462903c72250d963dd82e1d1a0518d4ff9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-895 Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-712 Malicious code in wlwz-2312-6002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fa67743cdaaa5fb274a34fcaf974acd46c3eef77eb72b6412f2ad215b625790 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-700 Malicious code in wlwz-2312-5808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d50b1e7740a7ec2fc82b63bf66ef1da6ef987279944519383d6e79440bccf12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-604 Malicious code in wlwz-2312-4802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96e271afa550a130677affbf4460afe6380a6a7eebd04e245bd946811ae6c00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-540 Malicious code in wlwz-2312-4101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46594e9ae269ec604da5073cb6386a1e132978f980b8b43e87ecddd64756b424 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-422 Malicious code in wlwz-2312-2800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d10037b506d53ce78827697987a27ffcabbe7ed7bdfcb53be766bac27b7f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-272 Malicious code in wlwz-2312-1103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb3cad0c6be5185b444f2611f3c1f4277f2bc0edb5864196cbdd2c41a093925 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-205 Malicious code in wlwz-2312-0308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d2bd970f9963c2640cdc75e9c11b18a04ad81064be46fef18cfe0db533a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-226 Malicious code in wlwz-2312-0602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3803906062c3060ef288f681d33d9012735681736f1fd8e73e4d99866c572a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-198 Malicious code in wlwz-2312-0301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa89b78d73d080fea21c86e8f76bb8db1113718a8c3464a1457a4e71aab57af9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-249 Malicious code in wlwz-2312-0807 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19c60876766fc6be6c4d3c052be321074be7036e5dd3934244344c1c6d98ef3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-353 Malicious code in wlwz-2312-2003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c8932c831e59a44db22fc2cf606a386ce5987461f78dc591a4bf14b1a6fee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-526 Malicious code in wlwz-2312-3905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d95981fea3ccb3d5c3180f7b33ec927c5738d26968302a7a2e0cb87e903950 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...