Malicious code in voicemail-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5878d22bc0387042e57bc928aa24a860670e5f70a051ba67104f1d9abc22253d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6955 Malicious code in voicemail-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5878d22bc0387042e57bc928aa24a860670e5f70a051ba67104f1d9abc22253d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6245de88dda255b54977801c4cb54ca206cf3e832670277220fba95bf3707455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4881 Malicious code in node-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6245de88dda255b54977801c4cb54ca206cf3e832670277220fba95bf3707455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2806 Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1823

Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execu...

Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7103 Malicious code in webpack-vue-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-vue-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6166 Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-14142 · Mcafee · Mcafee Consumer Product Removal Tool

Name of the Vulnerable Software and Affected Versions: McAfee Consumer Product Removal Tool versions prior to 10.4.128 Description: The issue is related to improper privilege management, which could allow a local user to modify a configuration file. This modification could lead to a LOLBin Living...

TP-Link AX50 Remote Code Execution

Exploit Title: TP-Link Router AX50 firmware 210730 - Remote Code Execution RCE Authenticated Exploit Author: Tomas Melicher Technical Details: https://github.com/aaronsvk/CVE-2022-30075 Date: 2022-06-08 Vendor Homepage: https://www.tp-link.com/ Tested On: Tp-Link Archer AX50 Vulnerability...

[SECURITY] Fedora 35 Update: golang-github-containerd-cni-1.1.6-1.fc35

A generic CNI library to provide APIs for CNI plugin interactions. The library provides APIs to: - Load CNI network config from different sources - Setup networks for container namespace - Remove networks from container namespace - Query status of CNI network plugin initialization...

[SECURITY] Fedora 36 Update: golang-github-containerd-cni-1.1.6-1.fc36

A generic CNI library to provide APIs for CNI plugin interactions. The library provides APIs to: - Load CNI network config from different sources - Setup networks for container namespace - Remove networks from container namespace - Query status of CNI network plugin initialization...

PT-2022-20669 · Unknown · Dlt-Daemon

Name of the Vulnerable Software and Affected Versions: dlt-daemon version 2.18.8 Description: An issue in the dlt config file parser.c file allows attackers to cause a double free via crafted TCP packets. This can be exploited by sending specifically crafted packets to the affected system...

TRENDnet TEW-831DR 跨站脚本漏洞

The TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which stems from the vulnerability of the Network Pre-Shared Key field on the web interface to cross-site scripting attacks. An attacker can use a simple XS...

CVE-2022-31069 Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in...

CVE-2022-20207

In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Siemens SINEMA Remote Connect Server 安全漏洞

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A security vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from a system image...