Malicious code in @zitterorg/dolorum-aut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfd1fe0250e37ac6db80fed373ad9c4e2d66220661c939422eed53ad0638d402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zitterorg/dolorum-aut

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @juiggitea/aut-autem-voluptatem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef459e325bdc26e1eb9efbded516980f643e036dc4e704e96f66fbe9b6078541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @juiggitea/aut-autem-voluptatem

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @juiggitea/alias-excepturi-quod-aut

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2022-31530

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31530

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31530

The CVE-2022-31530 issue affects the csm-aut/csm repository up to version 3.5. Root cause: unsafe use of Flask’s send_file function, which allows absolute path traversal. Impact: an attacker could access arbitrary files/directories on the file system. The Red Hat, ENISA, CNVD, CVE databases corro...

PT-2022-20801

Name of the Vulnerable Software and Affected Versions csm-aut/csm repository versions through 3.5 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 3.5, consider restricting access to the send file...

CVE-2022-31530: Improper Limitation of a Pathname to a Restricted Directory

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

The vulnerability of the Cisco Unity Express autocalendar, related to the restoration of a questionable data structure in memory, allows an attacker to execute arbitrary commands.

The vulnerability of the Cisco Unity Express aut secretary relates to the restoration of unreliable data structures Java objects in memory during the processing of requests by the Java RMI Remote Method Invocation service. This vulnerability could allow a malicious actor to execute arbitrary...

Updated wordpress packages fix security vulnerabilities

Updated wordpress packages fixes security vulnerabilities: The wordpress package has been updated to version 3.9.6, which fixes multiple cross-site scripting issues, including CVE-2015-3440, and other bugs. Note that upstream has advised us that WordPress 3.9.x is no longer supported. As this...