Malicious code in dedicated-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4b788f6715525b4725cb43dfd6d9a25dc72435296cd802ed01fcb0ff2d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www.uniswap.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06666eea24c6cbc300ef7159f1e747181b46f1f6d3bfa5ef7080385a97ec1dc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lido-dao-test-dp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b3cda81343e26318448ae8ce053a04b74276f2e99a2af6cdb288720e87fa6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in suspicious-react-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72ddb83c9fbe20fe07636b0a5aedb1c5f788d74050f6027f090bce10b2ab48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tss-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ed525a62f5615fed9599256a3276bc2a7471fbf1248bc53288321fba1968a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connect_softbank_interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f187a923be989830e488c7a61c4c42d36d9ec33482aaf7fd9403f9de8df7c49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gadgetstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af62b1a5fde86bde8db987e13fb4a174806d4481c18eef3482688bd8cb263d19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639528a422b1d6b2bba5f74b3643c55589cca94af8c73d8f98784f97b827c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-2400

CVE-2022-2400 affects php-dompdf prior to 2.0.0, with Debian/Ubuntu advisories (DLA-4427-1, USN-6277-1/2) documenting a vulnerability where external control of the file name/path could bypass access checks. Debian 11 fix: upgrade to 0.6.2+dfsg-3.1+deb11u1; Ubuntu advisories reference correspondin...

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H is related to incorrect external control via name or file. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2022-34765

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

Design/Logic Flaw

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

CVE-2022-34765

CVE-2022-34765 is a CWE-73 vulnerability (External Control of File Name or Path) affecting Schneider Electric X80 advanced RTU Communication Module BMENOR2200H (V2.01 and later) and OPC UA Modicon Communication Module BMENUA0100 (V1.10 and prior). The issue arises when user-controlled data can in...

Malicious code in gemcqukvlhfntxjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c9686c740c7f155b0dae28aea40c8343647df6a803ff7fac429720279a19dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cfbmoklknehgzjts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f510f9605cfa0118901392bd776c11973da5a2bee5f3e63aca8c03f38702637f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glqokkcbpdirtxme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d690b36154baf59ab8e5378369c0f4fa84a61dc8ea63b58ecae1da5804dc41f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ojbznypdfmaiusgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65dbe966349297c0324815c1ed0f6dc2a508f96a0dd4e2b86e1eaae7032ec106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...