MAL-2023-342 Malicious code in fc-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8d6bb92a710835f8785839506932483d23f3a9efba0b3a5ac06dec1c2b133a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in planetbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714442275b43592301580a64cbed17b16de57601a71b3e5c3b3c37222a587ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-39 Malicious code in @leanmull/leveldb-decryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a49cf8566f61f2b84921d8974682c4a4f9b1c7dab8a9aa51e7c5bce180f451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-156 Malicious code in calandraca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1ad519637712e055bfbbd5ac5064a17cf750fa0f3df7be9c15075849ea8104c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-282 Malicious code in dow-load-the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4655dddb557aca9471834ace6307c0d91fb43b7a462099e53022715193df82f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-244 Malicious code in der_zahlenteufel_enzensberger_pdf_free_hot__760 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6a62f3125320f39115c74c9e81c5d4910fd823043cac3404d56b551a8fef18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-104 Malicious code in apnic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1754bbb2103752ba95bc70121a835e6e84cccad0943712386bbb399e5e6761d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-862 Malicious code in tetete12312 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a599485f0fdc009bb5be306d1bf977208f01e4508ca170506ee0144aa6f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-21930

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

MAL-2023-712 Malicious code in puik-experimental (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82937cb1c93ef762188c789cd675a66b756f28c87484b4001febf9ba86792729 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-27 Malicious code in @bingads-webui-campaign-react/labels-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5055c6a222849b6ee18142cce7d609e00c04c147c4c60f6460a128aacca6252 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-48222

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full...

Malicious code in @miro-site/features-standard-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14befc1f8b80266548629b51f024e1ee42d70a03cc467d729375c93907af5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-26046 teler-waf subject to bypass of common web attack threat rule with HTML entities payload

teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...

Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-47 Malicious code in @pagseguro/pagseguro-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8e3f853a167ac4fc6f37a0c3b1b12bdba5e57f568800476f319399643b6b0fa9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

K10143: Cross-Site Scripting Vulnerabilities in the FirePass logon

Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this Solution have not been evaluated for...

K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986

Security Advisory Description The iControl REST interface has an unauthenticated remote command execution vulnerability. CVE-2021-22986 Impact This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management interface and se...

K56142644: Appliance mode Advanced WAF/ASM TMUI authenticated remote command execution vulnerability CVE-2021-22989

Security Advisory Description When running in Appliance mode with Advanced WAF or ASM provisioned, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. CVE-2021-22989 Note : For...

K91171450: BIG-IP engineering hotfix Trusted Platform Module vulnerability CVE-2020-5851

Security Advisory Description On impacted versions and platforms, the Trusted Platform Module TPM system integrity check cannot detect modifications to specific system components. CVE-2020-5851 Impact BIG-IP The Trusted Platform Module TPM on the BIG-IP iSeries platforms i850, i2000, i4000, i5000...