Lucene search
+L

5449 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:19 p.m.•6 views

Malicious code in schema-plugin-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70232e33e5a2e85b6f33884f9f06cd4749582a84331debd9bac517830afe5b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:19 p.m.•12 views

MAL-2022-5963 Malicious code in schema-plugin-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70232e33e5a2e85b6f33884f9f06cd4749582a84331debd9bac517830afe5b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•12 views

Malicious code in azure-schema-registry-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a72b71ca48e96c680dd314733c290457a41ccb6bfc94e1fec0e5ccbc390fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•10 views

Malicious code in azure-schema-registry-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af36c5bd9bf5360c7c6a55c0d30ada65c57855871fa975f43b44d344252a0999 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•12 views

Malicious code in azure-schema-registry-avro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25017be6d6a61569e0ed350140bf9b3dbbe967f00da6fba0b1a4ad7894b80c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:16 p.m.•15 views

MAL-2022-1370 Malicious code in azure-schema-registry-avro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25017be6d6a61569e0ed350140bf9b3dbbe967f00da6fba0b1a4ad7894b80c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•13 views

Malicious code in azure-schema-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7239e76ddb4f76c58831d67f5b00cd12ddfa0885130a183f98b0e108f228348e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:16 p.m.•15 views

MAL-2022-1369 Malicious code in azure-schema-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7239e76ddb4f76c58831d67f5b00cd12ddfa0885130a183f98b0e108f228348e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•12 views

Malicious code in azure-schema-registry-avro-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81cabaa760a2171a8d6fb5b5bb7a5dbeba89ea987e1b4658ae703b654ca646ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•10 views

Malicious code in azure-schema-registry-avro-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7be5db41cd9eca80f1d91e2e6ea0b4a802d8e5cebf16e171df76f068617568d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:16 p.m.•19 views

MAL-2022-1371 Malicious code in azure-schema-registry-avro-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81cabaa760a2171a8d6fb5b5bb7a5dbeba89ea987e1b4658ae703b654ca646ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:09 p.m.•14 views

MAL-2022-5964 Malicious code in schema-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0626f8c6634d26e8d8dfc4b08b2393fbbbeeea2885c7a2bb08be05c835682c0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:09 p.m.•9 views

Malicious code in schema-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0626f8c6634d26e8d8dfc4b08b2393fbbbeeea2885c7a2bb08be05c835682c0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2022/06/20 3:59 p.m.•33 views

CVE-2021-46823

A flaw was found in python-ldap. The vulnerability occurs due to a regular expression and leads to a denial of service attack. This flaw allows an attacker to parse LDAP schema definitions from an untrusted source, leading to a crash or code execution. Mitigation Check input for an excessive amou...

6.5CVSS5.4AI score0.01943EPSS
SaveExploits0References3
NVD
NVD
•added 2022/06/20 6:15 a.m.•29 views

CVE-2022-26669

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data...

8.8CVSS0.01077EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/06/20 6:15 a.m.•13 views

CVE-2022-26669

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data...

6.5CVSS6.7AI score0.01077EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/20 6:15 a.m.•21 views

Sql injection

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data...

4CVSS6.9AI score0.01077EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/20 12:00 a.m.•7 views

PT-2022-17998

Name of the Vulnerable Software and Affected Versions ASUS Control Center affected versions not specified Description The issue allows an authenticated remote attacker with general user privilege to inject SQL commands into specific API parameters. This can lead to the acquisition of the database...

8.8CVSS0.01077EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•9 views

CVE-2022-26669: Improper Neutralization of Special Elements used in an SQL Command

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data...

8.8CVSS6.8AI score0.01077EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/06/19 12:00 a.m.•27 views

Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

6.5CVSS4.2AI score0.01943EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder