Malicious code in subspace-relayer-front-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5ba5c7d050a216acda3025b0567509efd95f5e86479d47815a1b37ee74553dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mfp-test-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86dc27b32b9d647a1d1c8b7ed87647519d25047c6387276f4067acdddc1dbe29 The OpenSSF Package Analysis project identified 'mfp-test-repo' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in send-orchestrator-event-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3348279a1bc1471493fbd3415cdf02e1175ffa720b2c0df7fac42c1f7475b852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4987

A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/gettaskslist of the component GET Parameter Handler. The manipulation of the argument project/status/userid/sort/search leads to...

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

Default credentials

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

MAL-2023-8101 Malicious code in ppreact7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2ad9ded90a270baf25a460421789f5a815f2956ef05fcf3e1b96cf1b2f35eb2 The OpenSSF Package Analysis project identified 'ppreact7' @ 7.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in ppreact7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2ad9ded90a270baf25a460421789f5a815f2956ef05fcf3e1b96cf1b2f35eb2 The OpenSSF Package Analysis project identified 'ppreact7' @ 7.0.0 npm as malicious. It is considered malicious because: - The package...

Unspecified Vulnerability in Siemens QMS Automotive

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security vulnerability exists in Siemens QMS Automotive version V12.39, which stems from a lack of security controls in the affected application to prevent unencrypted communication without...

CVE-2023-41010

CVE-2023-41010 describes an Insecure Permissions vulnerability in the Sichuan Tianyi Kanghe / China Telecom Tianyi Home Gateway v.TEWA-700G. The issue allows a local attacker to obtain sensitive information via the device’s default password parameter . Affected product/version: v.TEWA-700G . Root...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

PT-2023-27742 · Sichuan Tianyi Kanghe Communication Co. · Tianyi Home Gateway

Name of the Vulnerable Software and Affected Versions: Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway version v.TEWA-700G Description: The issue allows a local attacker to obtain sensitive information via the default password parameter. This is related to an Insecu...

Input validation

An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...

Malicious code in brum-global-variable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb73c6cef367bf2c5464967ed374a34f64862b3598ebae764c8b292f5d47e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8099 Malicious code in brum-global-variable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57eb73c6cef367bf2c5464967ed374a34f64862b3598ebae764c8b292f5d47e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purplebricks-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166a338cbf2061c2c522db795a33313847ac718197150d27111861792523592c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-40729

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information...

Design/Logic Flaw

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information...