1265 matches found
MAL-2024-7199 Malicious code in @zitterorg/esse-quae (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50eec2d006ffc359b61460612d12be2fbff2a578b6ac6c1a087bb573a48cd1b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-6297 Several WordPress.org Plugins <= Various Versions - Injected Backdoor
Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator...
MAL-2024-1663 Malicious code in @elza/auto-route-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0394416e392791c5f23be36b82f8800fa29bfd1381f8be67c7362338279c0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2021-47596
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...
DEBIAN-CVE-2021-47596
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...
UBUNTU-CVE-2021-47596
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...
CVE-2021-47596 net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevfsendmbxmsg Currently, the hns3remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process...
MAL-2024-1571 Malicious code in asf-recorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0170c1a6080f641f60e56118c5047b047d529133a2aa949043ed62e0bac90488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How to tell if a VPN app added your Windows device to a botnet
On May 29, 2024, the US Department of Justice DOJ announced it had dismantled what was likely the world’s largest botnet ever. This botnet, called “911 S5,” infected systems at over 19 million IP addresses across more than 190 countries. The main sources of income for the operators, who stole a...
CVE-2024-3269
The Download Monitor plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on the dlmuninstallplugin function in all versions up to, and including, 4.9.13. This makes it possible for authenticated attackers to uninstall the plugin and delete...
WordPress plugin Download Monitor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
PT-2024-29038
Name of the Vulnerable Software and Affected Versions parisneo/lollms version latest Description The issue is related to arbitrary code execution due to insufficient sanitization of user input. Specifically, the /unInstall binding endpoint is vulnerable, and the problem arises from the lack of pa...
MAL-2024-1339 Malicious code in test-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d622822e0356b992f815ba0a803ee7598a5ff51894216a53a95ac034ca1185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1337 Malicious code in @sxmp/logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae4f22558826d41c2db8d6705d87e6c33f6da3737504e0107814a9853924bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-23457
The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209...
CVE-2024-23457 Anti-tampering can be disabled with uninstall password enforced
The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209...
PT-2024-19879 · Zscaler · Zscaler Client Connector
Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2.0.209 Description: The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. Recommendations: For versions...
Malicious code in trip-component-platform-online-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6902c9afc31fa0c3a2b8cc9970a33d7a27356e2171646b06e01e383655efea51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
