Malicious code in tss-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ed525a62f5615fed9599256a3276bc2a7471fbf1248bc53288321fba1968a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connect_softbank_interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f187a923be989830e488c7a61c4c42d36d9ec33482aaf7fd9403f9de8df7c49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gadgetstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af62b1a5fde86bde8db987e13fb4a174806d4481c18eef3482688bd8cb263d19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639528a422b1d6b2bba5f74b3643c55589cca94af8c73d8f98784f97b827c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-2400

CVE-2022-2400 affects php-dompdf prior to 2.0.0, with Debian/Ubuntu advisories (DLA-4427-1, USN-6277-1/2) documenting a vulnerability where external control of the file name/path could bypass access checks. Debian 11 fix: upgrade to 0.6.2+dfsg-3.1+deb11u1; Ubuntu advisories reference correspondin...

CVE-2022-2400: External Control of File Name or Path

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

OPC UA Modicon Communication Module DoS

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to incorrect external control via name or file. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2022-34765

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

Design/Logic Flaw

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

CVE-2022-34765

CVE-2022-34765 is a CWE-73 vulnerability (External Control of File Name or Path) affecting Schneider Electric X80 advanced RTU Communication Module BMENOR2200H (V2.01 and later) and OPC UA Modicon Communication Module BMENUA0100 (V1.10 and prior). The issue arises when user-controlled data can in...

CVE-2022-34765: External Control of File Name or Path

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

Malicious code in gemcqukvlhfntxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c9686c740c7f155b0dae28aea40c8343647df6a803ff7fac429720279a19dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cfbmoklknehgzjts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f510f9605cfa0118901392bd776c11973da5a2bee5f3e63aca8c03f38702637f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glqokkcbpdirtxme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d690b36154baf59ab8e5378369c0f4fa84a61dc8ea63b58ecae1da5804dc41f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kejukosqlprdgfct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcfc79724557a71fc30aa33830ef28089311adf3cdf8a3b6bae53d4242a8683f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kjadufvkoltqznib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf7f80390b15771a974a527d00cedc996894dead36d79ac71f912eee78377db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cakwgoydmhvlnits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd01a1c3ff73b01a008d66cddae5c2fb67ba41181067cfa6e4e9593e96450cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...