Malicious code in native-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b5162a3b0e694963b12247772774451535a0374a380e9b49c9f03c0f84d383 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-388 Malicious code in @ljon/meterpreter-backdoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8d64a22d47684bee253cf7b8c674edd75ce97c1f420c5bdf550e7fd1e145cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ljon/meterpreter-backdoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8d64a22d47684bee253cf7b8c674edd75ce97c1f420c5bdf550e7fd1e145cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dazaar-payment-lightning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7226941fe2ffff561836755d642ba46fd05042203afb41780113b47705fd0062 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-chris/ecutree-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de2f3a984b10372426cccf9bafba33bdc5a0fc6efc09d5c89d2474d932e69701 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amberdata-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00f87e296c2ebe96b609c852f357a35da6163c3fdfec66fab791b42c316ceb43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dp-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e39b724cb62775393f743e7ffa809169d2b91e5afb97cdcc6973a614d02dfdf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rancher-website-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030aba0fda5958570307e15fc0aa75c5ea4c7517ad03f30dd76176340fc33028 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @amazonvrp/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c49db6db27f75218196c60f3c92e86127175562468dc3f8e3fcee33273caaba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtkjngikdbwkerg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de260060264b8a31fde7c36476344783bbc413ae86bec7e206c631ea1cdc106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dd-opentracing-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094869f1cac10d1231339fa194b3ff020ef412c2353e2f171bcd02a49ac2374f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mitel 6800/6900 Series SIP Phones Backdoor Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2022-021 Product: Mitel 6800/6900 Series SIP Phones excluding 6970 Mitel 6900 Series IP MiNet Phones Manufacturer: Mitel Networks Corporation Affected Versions: Rel 5.1 SP8 5.1.0.8016 and earlier Rel 6.0 6.0.0.368 to 6.1 HF4...

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Hardcoded Backdoor User and Outdated Software Components product: Nexans FTTO GigaSwitch industrial/office switches HW version 5 vulnerable version: See "Vulnerable /...

Infiray IRAY-A8Z3 1.0.957 Code Execution / Overflow / Hardcoded Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Infiray IRAY-A8Z3 thermal camera vulnerable version: V1.0.957 fixed version: None CVE number: CVE-2022-31208, CVE-2022-31209,...

CVE-2021-40903

A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server. Settings file has a predefined secret string, which would be randomly generated, however it is static...

China-linked APT Flew Under Radar for Decade

Researchers have identified a small yet potent China-linked APT that has flown under the radar for nearly a decade running campaigns against government, education and telecommunication organizations in Southeast Asia and Australia. Researchers from SentinelLabs said the APT, which they dubbed Aoq...

Antminer Monitor 信任管理问题漏洞

Antminer Monitor is a cryptocurrency ASIC mining hardware monitor using a simple web interface by the individual developer Anastasios Selalmazidis in Greece. A trust management issue vulnerability exists in Antminer Monitor version 0.50.0, which is caused by a backdoor or misconfiguration in the...

Hackers Using Web3 Backdoor Wallets to Steal Seed Phrases from iOS/Android Users

By Deeba Ahmed A Chinese-speaking, technically skilled threat actor distributes backdoored applications to extract cash from victims in a newly discovered… This is a post from HackRead.com Read the original post: Hackers Using Web3 Backdoor Wallets to Steal Seed Phrases from iOS/Android Users...

PT-2022-3530 · Schneider Electric · Ecostruxure Cybersecurity Admin Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Cybersecurity Admin Expert CAE versions prior to 2.2 Description: A vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local...

Chinese Hackers Distribute Backdoored Web3 Wallets for iOS and Android Users

A technically sophisticated threat actor known as SeaFlower has been targeting Android and iOS users as part of an extensive campaign that mimics official cryptocurrency wallet websites intending to distribute backdoored apps that drain victims' funds. Said to be first discovered in March 2022, t...