MAL-2022-212 Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-726 Malicious code in @wix-ui/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d3c996c7fcc5aec2e912a78c2e6a6312000aa86c82ffc19c9e825bdb828eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-727 Malicious code in @wix-ui/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 912baff568719c7c0652531b501d1cd8d3baf6be4a14dc6136f40bb97d4041f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgnsys/editor-elements-design-systems (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 457a4e00cb01706883e4fbdb542cc7cd24dc705682b26d4e0b0a859bc26a77dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-729 Malicious code in @wixui/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64156cdf4be23183c3d841bcf8f0d806edbc674707cfce5177ab0508059d2c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-728 Malicious code in @wix-ui/editor-elements-design-systems (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5c8d828f9016869c3426ca1f4d4aefe7d14e402feb469e95f1776f8c7b8a5ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3bfa01c6d6f4c487363467bc8b209bca9f3d117227b499142dffde1ef9c93c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed0a14024714d750238d7a65813087875725a2907ca547023a0ab221d1e85758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2665 Malicious code in editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed0a14024714d750238d7a65813087875725a2907ca547023a0ab221d1e85758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2112

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2...

PT-2022-14864

Name of the Vulnerable Software and Affected Versions inventree versions prior to 0.7.2 Description The issue is related to the improper neutralization of formula elements in a CSV file. This problem affects the inventree GitHub repository. Recommendations For versions prior to 0.7.2, update to...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary shell commands.

The vulnerability of HID Mercury programmable logic controllers exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary shell commands by sending a special...

CVE-2022-2027

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0...

Input validation

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0...

titra 安全漏洞

titra is a modern open source time tracking project for freelancers and small teams. A security vulnerability exists in versions prior to titra 0.77.0, which stems from improperly neutralized formula elements in CSV files...

The vulnerability of the Tuleap lifecycle management system, which arises from the failure to take measures to neutralize special elements, allows a perpetrator to forcibly suspend an account or gain control over another account.

The vulnerability of the Tuleap application lifecycle management system exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely and with administrative privileges, to temporarily disable a user accou...

The vulnerability of the Tuleap lifecycle management system, which arises from the failure to take measures to neutralize special elements, allows a perpetrator to forcibly suspend an account or gain control over another account.

The vulnerability of the Tuleap application lifecycle management system exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely and with administrative privileges, to temporarily disable a user accou...

CVE-2022-2027

Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0...

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software lies in the lack of measures to neutralize specific elements within it. This allows attackers to execute arbitrary commands or trigger service failures.

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause...