GHSA-8F4F-V9X5-CG6J CloudCore UDS Server: Malicious Message can crash CloudCore

Impact A malicious message can crash CloudCore by triggering a null-pointer dereference in the UDS Server. Since the UDS Server only communicates with the CSI Driver on the cloud side, the attack is limited to the local host network. As such, an attacker would already need to be an authenticated...

CVE-2021-41637

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...

CVE-2021-41637

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...

CVE-2022-34202

Jenkins EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2022-34199

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

Malicious Package

Overview test-async-config is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview eslint-config-ot-node is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

QNAP, Taiwanese maker of network-attached storage NAS devices, on Wednesday said it's in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code execution. "A vulnerability has been reported to affect PHP versions 7.1.x below 7.1.33, 7.2.x bel...

EulerOS 2.0 SP8 : git (EulerOS-SA-2022-1929)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

Malicious code in config-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 758e9cd06382fa4e763a0d472eb1acad2baa19d30bf6a20bf3dabd8b11969557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2151 Malicious code in config-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 758e9cd06382fa4e763a0d472eb1acad2baa19d30bf6a20bf3dabd8b11969557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2130 Malicious code in commonweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed560f6aa9d920923f2682f9cfab033f483d7e955c57f7d9f8dcd22ba4157c7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commonweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed560f6aa9d920923f2682f9cfab033f483d7e955c57f7d9f8dcd22ba4157c7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2804 Malicious code in eslint-config-products (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b7412401c48258fcb2fc7caa6d255609baf3ad31fb741b96fdb859909a615dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-rol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59802bc5756428efbf7b526544c4810c52e25993ab31429ba7463831b40b9be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2807 Malicious code in eslint-config-vmware-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b433b08ddf72ccbb8396c9351ca1e2de9849dc8e4b66bfb49c57c54fab9fd278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atomic-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb59092c4c75420958b0b5d645dfdcd9337ff4698d961ddfafe8041d84b0b530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1162 Malicious code in atomic-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb59092c4c75420958b0b5d645dfdcd9337ff4698d961ddfafe8041d84b0b530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4316 Malicious code in lint-config-qiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e79286ad9f157e9ada13b80515e00e1ad6d6c2ba5ef082e276af3e9da6d390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...