MAL-2022-3314 Malicious code in gd-react-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c25de609c894caa60e13d477a2693cae949d3b2176cef26480a043162c4c154c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed92faab6ea432842dfa5f3d87e4da52a0e662fa36d83ba58c218a673dee4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6606 Malicious code in toolbox-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed92faab6ea432842dfa5f3d87e4da52a0e662fa36d83ba58c218a673dee4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/async-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed6043d62007fd2c0e9cbb7d2c4c3f699d6f97ae27a7f8cc5744c19e9128c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-412 Malicious code in @manomano-toolbox/async-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed6043d62007fd2c0e9cbb7d2c4c3f699d6f97ae27a7f8cc5744c19e9128c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/commercial-operations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f71659970c3cafa581f96a058c5ffb608c3a9c9a465c13cd7abde7b4cbf0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-414 Malicious code in @manomano-toolbox/commercial-operations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f71659970c3cafa581f96a058c5ffb608c3a9c9a465c13cd7abde7b4cbf0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4141fb4b8de9f49fbbe144aa0dacfbda2d8ec36a8314190745e67a161d0bd481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-415 Malicious code in @manomano-toolbox/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4141fb4b8de9f49fbbe144aa0dacfbda2d8ec36a8314190745e67a161d0bd481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/api-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db95524e5bf90907d13f9109419d2a10727fd9549c599cad79231ab6359745f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/pim-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce330b8bf18cd09a6c497d52b9254f771600e32cee266dc414d683502e01e67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-416 Malicious code in @manomano-toolbox/hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce330b8bf18cd09a6c497d52b9254f771600e32cee266dc414d683502e01e67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-418 Malicious code in @manomano-toolbox/toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f8ad568240473692aa6be29746503afc42eb55d6c98f814f2911c01fa046991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-417 Malicious code in @manomano-toolbox/pim-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

arpes (>=1.0.0 <=2.2.0), convert-and-download (>=0.1.3 <=0.2.4) +24 more potentially affected by CVE-2019-9644 via notebook (>=4.2.3 <=5.7.5)

notebook PYPI version =4.2.3, =1.0.0, =0.1.3, =1.0.0b1, =0.0.2, =1.31.7.dev0, =0.1.1.10, =0.2.1, =0.1.6.2, =0.1.2, =0.1.0, =0.5.0, =1.0.1, =0.1.1, =1.0.1 - marvin-python-toolbox =0.0.4 and more Source cves: CVE-2019-9644 Source advisory: OSV:GHSA-HHX8-CR55-QCXX...

container-tools:rhel8 bug fix update

An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...

container-tools:3.0 security and bug fix update

An update is available for fuse-overlayfs, container-selinux, udica, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Use-after-free of ID and IDREF attributes CVE-2022-23308 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

Dahua ToolBox 1.010.0000000.0 DLL Hijacking

Hi all, I have actually contacted Dahua PSIRT team and they confirmed the vulnerability exists few days ago but then since this product is not in that scope on requesting CVE and therefore I am going to disclose the details here: Vulnerable Software and Version: ToolBox-V1.010.0000000.0 versions...