MAL-2022-6389 Malicious code in sync-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4acb1678e3420191321cd1a4385ce0b4bee92a3428a42666620c96fc28a35eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-lastest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c78f4997e4b378d63d24061f7eba2438ea82aec52c6b7f1860c3c2de9beeaed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2927 Malicious code in express-lastest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c78f4997e4b378d63d24061f7eba2438ea82aec52c6b7f1860c3c2de9beeaed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors_express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bc2843a87b773e6b16104c1ee4c2e68f2b7e8eb4ec84476a844b5f2fb6bec9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HCL Technologies VersionVault Express Information Disclosure Vulnerability

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies India.A security vulnerability exists in HCL Technologies VersionVault Express, which stems from the application exposing sensitive information about server communications. An attacker could...

CVE-2021-27779

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

Code injection

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779 A Security Misconfiguration vulnerability affects HCL VersionVault Express

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

CVE-2021-27779

CVE-2021-27779 affects HCL VersionVault Express. Connected sources describe the vulnerability as an information disclosure that allows an attacker to impersonate the server or eavesdrop on communications with the server. No concrete exploit details or patch/version information are provided in the...

PT-2022-9865

Name of the Vulnerable Software and Affected Versions VersionVault Express affected versions not specified Description The issue allows an attacker to expose sensitive information, which can be used to impersonate the server or eavesdrop on communications with the server. Recommendations At the...

HCL Technologies VersionVault Express 安全漏洞

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies India.A security vulnerability exists in HCL Technologies VersionVault Express, which stems from the application exposing sensitive information about server communications. An attacker could...

CVE-2021-27779: Missing Encryption of Sensitive Data

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server...

@nexus-switchboard/nexus-conn-jira (>=0.1.0, <=0.2.2), @nexus-switchboard/nexus-mod-service (>=0.4.1, <=0.6.3) +1 more potentially affected by CVE-2021-26073 via atlassian-connect-express (>=3.5.2, <=4.4.1)

atlassian-connect-express NPM version =3.5.2, =0.1.0, =0.4.1, =0.0.1, =2.0.5 Source cves: CVE-2021-26073 Source advisory: OSV:GHSA-4V96-M8XV-X83V...

GHSA-4V96-M8XV-X83V Broken Authentication in Atlassian Connect Express

Broken Authentication in Atlassian Connect Express ACE from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or...

Broken Authentication in Atlassian Connect Express

Broken Authentication in Atlassian Connect Express ACE from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or...

How iPhones can run malware even when they’re off

Most people think that turning off their iPhone - or letting the battery die - means that the phone is, well, off. The thing is, this isnt quite true. In reality, most of the phones functionality has ended, but there are components that mindlessly continue a zombie-like existence, for the most pa...

Connect-Multiparty allows arbitrary file upload

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report...

CVE-2022-29623

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report...

CVE-2022-29623

An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted PDF file. NOTE: the Supplier has not verified this vulnerability report...