Malicious code in hsqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6af02b8a41a1ba2a2897c59a9bfe66780bc83afc705127d53c22c2d463c74bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-fallen-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31e79019d42645171a0a0457db1d85815664700b6a48f72e42d4ca92025f5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Dompdf vulnerabilities (USN-6277-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6277-1 advisory. It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstance...

Malicious code in expressautomations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec539f05cce60ebaee5568d0e4a2b2390e2d5ccbef3f43409bbd82e11e12d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VulnCheck KEV: CVE-2022-39952

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

Malicious code in meetingsdk-sample-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb53d02e988a276631d13cbb6486793e2858c3a6f266fb6601d395b5d6fd97d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FortiNAC - External Control of File Name or Path in keyUpload scriptlet (FG-IR-22-300)

The version of Fortinet FortiNAC installed on the remote host is 8.3.x, 8.5.x, 8.6.x, 8.7.x, 8.8.x, 9.1.x prior to 9.1.8, 9.2.x prior to 9.2.6, or 9.4.x prior to 9.4.1. It is, therefore, affected by an external control of file name or path security issue. An unauthenticated, remote attacker can...

MAL-2023-1271 Malicious code in proofing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f14f43198ca513e826ec04070bdebd29c55c4a628a9388c794b5d8a862dd09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Go programming language lies in its insecure external control over critical data states. This allows attackers to escalate their privileges and gain access to read, modify, or delete data.

The vulnerability of the Go programming language is related to the insecure external control over critical state data during the processing of setuid and setgid attributes. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain access to read, modify, or delet...

Format string

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code o...

Malicious code in packj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa234f9cd17f850d24031cd41a8370ad57596e538deb70be48d9fdea3fc4577a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f4167da0bf5409b53f5b683dcdb962d93b6d03e2d9e3916c5859f78f8f9f1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-generic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebcee925a3db4677284b6cff8cc2c67b9f33a6a143ce355978379fd43b52a6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-customer-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d285e54aa297d074fb908486497560ee5e7fa75c0c415eda550717a464d868 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d196877cc4a07d7fc4ab1f9662861e68702c57f8f4b5ef2a5b28d0f2b8db41ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aonetecha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b294cde83510c3c0226de6bc98055a32e9ac187678290c54a580f7267f7629cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

External Control Of Configuration

in-toto is vulnerable to External Control of Configuration. The vulnerability exists due to the insecure implementation of the usersettings module, which allows an attacker to write configuration from the local directory and mask their activities by passing a maliciously crafted .intotorc file,...

Malicious code in the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91700b0da8e1a53e1564ef80ca21fc0058d6bb18cfea0245dbd1bcf42c6062f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dow-load-twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992916e30ffe316f71ab67ab891183b2e852e6e9a04300baf44278b106f7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...