CVE-2023-6569

The CVE-2023-6569 entry concerns h2oai/h2o-3 with a vulnerability labeled as External Control of File Name or Path. Connected sources describe a remote, unauthenticated possibility for an attacker to overwrite arbitrary server files with attacker-controlled data; in the GHSA advisory this involve...

Malicious code in cosmos-wallet-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6583493058b4f8536df13eb5c7c6418badcae8f4c6cb5122d75ad79db0f174fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The software for Mitsubishi Electric GX Works3 programming is vulnerable. The software includes control tools for applications in industrial automation systems, namely MELSOFT iQ AppPortal, MELSOFT Navigator, and Motion Control Setting. This vulnerability allows a malicious individual to execute arbitrary code, disclose protected information, and trigger service failures.

The vulnerabilities of the software for programming Mitsubishi Electric GX Works3, as well as the software tools for managing applications in industrial automation systems such as MELSOFT iQ AppPortal, MELSOFT Navigator, and Motion Control Setting, are related to external control mechanisms...

Malicious code in pdf2htmlextest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b2331e000213f0f48b8ff8f978a0ce93926cf42935a72a611195eee4b7b4c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mitsubishi Electric FA Engineering Software Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : External Control of File Name or Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious...

Malicious code in sofa1-shop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2755f958af07d7b6ae67d65d8716e99ac2110252da50a85dd160343dbf4c7962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-34982

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service...

Xxe

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service...

CVE-2023-34982 AVEVA Operations Control Logger External Control of File Name or Path

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service...

CVE-2023-34982

CVE-2023-34982 affects AVEVA Operations Control Logger (external control of file name or path). A local OS-authenticated user with standard privileges could delete files with System privileges, leading to denial of service. The CVE is discussed across multiple sources (NVD entry and AVEVA/ICS adv...

ROS-20231109-01

Go programming language vulnerability is related to insecure external control of critical state data state when processing the setuid and setgid attributes. Exploitation of the vulnerability could allow an attacker, acting remotely, escalate their privileges and gain access to read, modify, or...

Malicious code in discordwebtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fc6280f498cd214de7d4afd0a46edee0c887c1377a342ad31e365f736ed539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8415 Malicious code in bonded-stablecoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5783c50f1b49753de6ebb992bb15ea3197c4db4138fa711bbd25cd125199963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @momo-miniapp/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6007d4e44cc4c068a9bb068cda01c272f184a9023da891b3f63737a50f814575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onno-missing-2023-full-movies-at-home-streamnig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f74f65cd28f1a691661130f5fd88a71bbf299125018d4be7085f77e8138ffe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the curleasyduphandle function, allowing an attacker to insert cookies into a running program using this library. When this function is used to duplicate an easy handle with cookies enabled, the...

Malicious code in maris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51ada2e20ec86e5904271b914c6c51177884af2166992cf6534769a19a29fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jake-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b68dd08145ebfefd1660159fac302e02d16e89fe9c227d0bb307daa8c5ed05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symbl_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a6d892c350f9034ac4cd7c1670b6b7a31f864e0ef2beeccfd53bb309336396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8150 Malicious code in telia-common-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfebd0cdbe7eb17494bd4125767a79da7343f06e4fbe26c09d95f7b94e123f8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...