Malicious code in connect_softbank_interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f187a923be989830e488c7a61c4c42d36d9ec33482aaf7fd9403f9de8df7c49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639528a422b1d6b2bba5f74b3643c55589cca94af8c73d8f98784f97b827c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-2400

CVE-2022-2400 affects php-dompdf prior to 2.0.0, with Debian/Ubuntu advisories (DLA-4427-1, USN-6277-1/2) documenting a vulnerability where external control of the file name/path could bypass access checks. Debian 11 fix: upgrade to 0.6.2+dfsg-3.1+deb11u1; Ubuntu advisories reference correspondin...

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to incorrect external control via name or file. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2022-34765

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

Design/Logic Flaw

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

CVE-2022-34765

CVE-2022-34765 is a CWE-73 vulnerability (External Control of File Name or Path) affecting Schneider Electric X80 advanced RTU Communication Module BMENOR2200H (V2.01 and later) and OPC UA Modicon Communication Module BMENUA0100 (V1.10 and prior). The issue arises when user-controlled data can in...

Malicious code in gemcqukvlhfntxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c9686c740c7f155b0dae28aea40c8343647df6a803ff7fac429720279a19dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cfbmoklknehgzjts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f510f9605cfa0118901392bd776c11973da5a2bee5f3e63aca8c03f38702637f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glqokkcbpdirtxme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d690b36154baf59ab8e5378369c0f4fa84a61dc8ea63b58ecae1da5804dc41f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kejukosqlprdgfct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcfc79724557a71fc30aa33830ef28089311adf3cdf8a3b6bae53d4242a8683f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kjadufvkoltqznib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf7f80390b15771a974a527d00cedc996894dead36d79ac71f912eee78377db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cakwgoydmhvlnits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd01a1c3ff73b01a008d66cddae5c2fb67ba41181067cfa6e4e9593e96450cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2905 Malicious code in ewixaqlkksouyvhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2456568754b04a5f23b75b300ba8fe771ba30aa1f63cc6c88078e98f7cdf65a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3032 Malicious code in fikwnsgtoumjleqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cacff5bd7dd1f2b2308e0ed13423b97f6e50d1c61a0e0594defcf0e839e9fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hnkwfdvesrqbapzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aa0d3ad0c1499fbf69895a4de9d468d675edd1cac9b1509855b9feedfd4d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7261 Malicious code in xascmlwhokkitdpz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e88a815f725add5bcef9702ba69d6742b6ef0d2d5e0f1b06c4bec3ad98d41fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in personal-colors-kash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 314d8e8e81281e1eb99614b0ba515986bf54f7afaccd18e2dcb8f641ae43b232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...