Malicious code in python-bitget-connect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1797b7fdf9859888b5495817784ead0bdc01e6acad5ae410af1e1df89acbded6 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...

MAL-2024-11800 Malicious code in yir-image-gen-asana-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 050cc0b4f55e2e2b44e9eaeb0b6b269c8eab27bb007239d6fc7cb318e55f475d The OpenSSF Package Analysis project identified 'yir-image-gen-asana-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-9387 vulnerabilities

Vulnerabilities for packages: gitlab-cng-fips...

OPENSUSE-SU-2024:14571-1 docker-stable-24.0.9_ce-4.1 on GA media

These are all security issues fixed in the docker-stable-24.0.9ce-4.1 package on the GA media of openSUSE Tumbleweed...

MAL-2024-11785 Malicious code in snap-kit-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 591274c196648c43d806cc38ac33a04319ff82c5c4c9b1028590552c1fe4a841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11812 Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4e889992a980c69235fc81b993e0417a4bf52dcb6e16a20b0c32e8cf3057fe The OpenSSF Package Analysis project identified '@flutteruki-gaming/eslint-config-flutteruki-gaming' @ 1.8.0 npm as malicious. It is considered...

MAL-2024-11691 Malicious code in requestsuuuj (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11448 Malicious code in semi-animation-styled (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11445 Malicious code in securitytest3 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pagegraph-crawl (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11306 Malicious code in asdasssd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11266 Malicious code in @douinfe/semi-animation-react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11237 Malicious code in jquery.slideviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99adb7b17da26c89371b100994f4eaef06ce19a5103f35ea6230d375af0cc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2024:14558-1 python-furo-doc-2024.8.6-2.1 on GA media

These are all security issues fixed in the python-furo-doc-2024.8.6-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14547-1 ansible-core-2.17-2.17.7-1.1 on GA media

These are all security issues fixed in the ansible-core-2.17-2.17.7-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-X3F4-45XF-RJM7 vulnerabilities

Vulnerabilities for packages: xh...

CVE-2024-52280 vulnerabilities

Vulnerabilities for packages: rancher-agent...

edk2: Integer overflows in PeCoffLoaderRelocateImage

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...

CVE-2024-52303 vulnerabilities

Vulnerabilities for packages: airflow, checkov, py3-aiohttp...

CVE-2024-45610

GLPI CVE-2024-45610 describes a reflected XSS in the Cable form that can be exploited by an unauthenticated user. The initial description recommends upgrading to version 10.0.17. Connected sources indicate GLPI versions affected include 9.x through 10.0.18 and third-party advisories/CSAs referenc...