Malicious code in speedtestcliz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1277efe10b751c63dc427f71707ce44c7d1f84cc9cc8e75dea44bcb9b30342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestkas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prathmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463a1fff2f77680560596dbe40c47204ae5c79228c5dad33399f9fdd4441c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Siemens Automation License Manager File Name or Path External Control Vulnerability

The Automation License Manager ALM centrally manages license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for the software, the software can be used according to the end-us...

CVE-2022-43513: External Control of File Name or Path

A vulnerability has been identified in Automation License Manager V5 All versions, Automation License Manager V6 All versions V6.0 SP9 Upd4, TeleControl Server Basic V3 All versions V3.1.2. The affected components allow to rename license files with user chosen input without authentication. This...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter due to improper escape of the " character in the generatemultipart function, which allows injecting malicious content to the filename parameter via the Content-Disposition header. PoC...

CVE-2022-45213: External Control of File Name or Path

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-27685 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for external control of file name or path. Recommendations: For versions prior to 7.16, update to version 7.16 or later to resolve the issue...

CVE-2022-45918: Externally Controlled Reference to a Resource in Another Sphere

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-45918

CVE-2022-45918 affects ILIAS eLearning platform prior to 7.16. The vulnerability is External Control of File Name or Path, with upstream advisories and Red Hat corroborating that versions

Malicious code in antiheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57640d463cf1be529df1b989b1c6b6c7c70485353571eb06099eaa9e99fcc842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox_expose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede419116d4ae54b61ef324d9714437511898468d434e69d394be699ff73ffee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/investigations-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fb466910cbd8f11eb9f83c1157f4f40e12cf74ff131ebec73f92b3ae0f962ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Creating Awareness of External JavaScript Libraries in Web Applications

Qualys Web Application Scanning WAS routinely reviews and solicits customer feedback regarding vulnerabilities. This may be to enhance the detection or the detections reporting. Previously, all JavaScript libraries detected on an application are reported under the Information Gathering QID 150176...

Malicious code in path-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94ae4bdfb7944796dc0ecef023b1fdff452a3a633c00fa2b7d9a6082bc689af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taniyadidipro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e743bce868f59e897bce1e00777f20e245da13b4f4890893471259ce497ce2db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...