CVE-2024-24821

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the invocation of Composer and in the context of the executing user. As such, under certain conditions arbitrary code execution may lead to local...

MAL-2024-843 Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-901 Malicious code in wlwz-2312-8102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d4ba8d8347a741afe930d1a57480d1b2674554816cfec9be4f6b247db6b2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-761 Malicious code in wlwz-2312-6506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aea22472e70a964e13cab36afaced4e3acd063cd17957600a0f42dc8183216d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-727 Malicious code in wlwz-2312-6108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99edbe296b84fa648a12e2f1eb3d3d21a29db3b8a1a08ec2932aa350f5d1ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-381 Malicious code in wlwz-2312-2304 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5588dd9053495627112852a1241039c004134918d531a651a1fc73c3b76fa78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-273 Malicious code in wlwz-2312-1104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e66ba5fd493bc1e8698e5af37fff100b470a08e7185da4c274733a24380e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22415 Unsecured endpoints in the jupyter-lsp server extension

jupyter-lsp is a coding assistance tool for JupyterLab code navigation + hover suggestions + linters + autocompletion + rename using Language Server Protocol. Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with...

GHSA-4QHP-652W-C22X Unsecured endpoints in the jupyter-lsp server extension

Impact Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with jupyter-server instances exposed to non-trusted network are vulnerable to unauthorised access and modification of file system beyond the jupyter root...

PT-2024-19406

Name of the Vulnerable Software and Affected Versions jupyter-lsp versions prior to 2.2.2 Description The issue affects installations of jupyter-lsp running in environments without configured file system access control and with jupyter-server instances exposed to non-trusted networks, allowing...

MAL-2023-8726 Malicious code in discord-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66350475cf0f0b373fa6a00f509ac77b07c132e71ff813aad93097a9f92ee6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8715 Malicious code in allianz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acefcd666d8be4ff038f0b8b5999c4f2921bc275a04c9480e3cfcc95a190fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...

CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...

PT-2023-7561 · Unknown · Digital Guardian Agent

Name of the Vulnerable Software and Affected Versions: Digital Guardian Agent versions prior to 7.9.4 Description: The issue is related to the unprotected storage of sensitive information in the Digital Guardian Agent. This allows a local attacker to retrieve the uninstall key and remove the...

MAL-2023-8554 Malicious code in ory-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intel® Smart Campus Android App Advisory

Summary: A potential security vulnerability in the Intel® Smart Campus android application may allow denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® Smart Campus android application. Vulnerabilit...

MAL-2023-8456 Malicious code in exnessimo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca1ddd7d06d62385796c54b6557a575b5572751df7689d7e57e3d88c54545d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-36621

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...

CVE-2023-36621

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...