Malicious code in speedtestcliz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1277efe10b751c63dc427f71707ce44c7d1f84cc9cc8e75dea44bcb9b30342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestkas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prathmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463a1fff2f77680560596dbe40c47204ae5c79228c5dad33399f9fdd4441c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Siemens Automation License Manager File Name or Path External Control Vulnerability

The Automation License Manager ALM centrally manages license keys for various Siemens software products. Software products that require a license key automatically report this requirement to ALM. When ALM finds a valid license key for the software, the software can be used according to the end-us...

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter due to improper escape of the " character in the generatemultipart function, which allows injecting malicious content to the filename parameter via the Content-Disposition header. PoC...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-45918

ILIAS before 7.16 allows External Control of File Name or Path...

Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-27685 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for external control of file name or path. Recommendations: For versions prior to 7.16, update to version 7.16 or later to resolve the issue...

CVE-2022-45918

CVE-2022-45918 affects ILIAS eLearning platform prior to 7.16. The vulnerability is External Control of File Name or Path, with upstream advisories and Red Hat corroborating that versions

Malicious code in antiheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57640d463cf1be529df1b989b1c6b6c7c70485353571eb06099eaa9e99fcc842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox_expose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede419116d4ae54b61ef324d9714437511898468d434e69d394be699ff73ffee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/investigations-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fb466910cbd8f11eb9f83c1157f4f40e12cf74ff131ebec73f92b3ae0f962ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Creating Awareness of External JavaScript Libraries in Web Applications

Qualys Web Application Scanning WAS routinely reviews and solicits customer feedback regarding vulnerabilities. This may be to enhance the detection or the detections reporting. Previously, all JavaScript libraries detected on an application are reported under the Information Gathering QID 150176...

Malicious code in path-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94ae4bdfb7944796dc0ecef023b1fdff452a3a633c00fa2b7d9a6082bc689af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taniyadidipro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e743bce868f59e897bce1e00777f20e245da13b4f4890893471259ce497ce2db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bifer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053f898cacbc320554b75b434f33bd3106a61898f1792a2932f3bf5e2479f760 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v976 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 089032be9e92734c08b2dd870e040ee39765250dca7f3366b97cbcd8cd7fcafb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v340 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43570bd043aa581a3eeb3e0fa059e89cbdd9eb7be6e3e3c531c90f5d71dca94b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...