CVE-2024-31409

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device...

Owlet Cam 操作系统命令注入漏洞

Owlet Cam is a video baby monitor from Owlet USA. Owlet Cam suffers from an operating system command injection vulnerability that originates from allowing an authenticated user to run system commands as the root user, which could lead to a complete compromise of the device...

Siemens SIMATIC CN 4100 信任管理问题漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability exists in the Siemens SIMATIC CN 4100 due to an affected device containing undocumented users and credentials. An attacker could exploit the vulnerability to misuse the credentials to compromise th...

Malicious code in @content-platform/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8483b2f250f1824837729cc5bf8f6fa9fe76e44cc5c0e9352b1112c8c83cd0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @assistedtax/demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2972fb44126ef7f02e56ab9b4935acea7521aebc2b5ef541889cb59b6bcd20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-red (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e225ff41c01ef3224699d4731fb3cc53a1596d35381bd0a174a606d30e509cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waveapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed8a707955886dfaa2b55283c703e3acbc8f5db17a426587702b53e53a9c0fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trip-component-platform-online-usp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a881b5f34acb08b303ac7f027ae585053ffab51b72cfa79a2bb4b4cbdf3f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in context-hydrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff67bde088549900a1c4d6c993e527f335f8c00e9f4d3d9e4a37dba1a81f0658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-15180 · Unknown · Sciener Locks

Name of the Vulnerable Software and Affected Versions: Sciener locks affected versions not specified Description: The firmware update mechanism of the locks does not authenticate or validate firmware updates when they are passed through the Bluetooth Low Energy service. An attacker can send a...

BIT-LIVEHELPERCHAT-2022-1234

XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...

Malicious code in erc20-testenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ba12fa784008a111d1c5f54bbb19cf4807564ce4e06434d4a10eae96767350a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vtuandz00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40326c62447e4c0afa817e4131690933922ce0212952668133c68f550f1c34db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7501 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a883c259e1d975cd2c64876b12e5ee8d45cdd25ddc6af62d9a89d85983b767d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c68a2663a7a188916befd49cd7e7cf13234eb6d83a82204e653c8a96139c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3a57595d825a746d705cb42d784fdd656532e9bc895396f404c33509303ec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6702 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aec37dbec74fa566c1ec87499d6d892bfff4099e3ff627b6569532ada7fce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e03b89f00d3e74850b4aa597aaac1d4fd433aec8df364777de6ee808d8733c82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7305 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b25269036db4654be10dfa348759eaf8b66b433054ef8311cebee2b2c217a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6008 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd8fc68f8c029245340af8f3136c28a9dcefad19cb646fb05a777cb169c73d2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...