Malicious code in mai-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40444fdff4b71d9bbfae7e0e2648d693d1c64f0bdbe1ce8e000a0f2af9f68738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the double memory release during the processing of input/output messages from the smart card. Exploiting this vulnerability allows an attacker to gain full control over the application by sending specially...

The vulnerability of the Upload component of the software environment for working with Oracle Web Applications desktop integrations allows a hacker to gain full control over the application.

The vulnerability of the Upload component of the Oracle Web Applications Desktop Integrator software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application through the use of the HTTP protocol...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the control interface of Juniper Networks’ Contrail Service Orchestration allows a attacker to enhance their privileges and gain full control over the application.

The vulnerability of the Juniper Networks Contrail Service Orchestration software platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the application...

Malicious code in maven-compiler-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 314e6207e1eff2d0ffa8de2edb81458a38f4cb93c6326291fe91105e46f67adf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DAIKIN SVMPC1 和 SVMPC2 信任管理问题漏洞

DAIKIN SVMPC1 and DAIKIN SVMPC2 are both a single-site and multi-site controller from DAIKIN Japan. A security vulnerability exists in DAIKIN SVMPC1 version 2.1.22 and earlier and SVMPC2 version 1.2.3 and earlier, which originates from a vulnerability that could allow a remote attacker to obtain...

Malicious code in harness-helm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0008cf12cac94140f089a7ba2a7d297c874737f5bfbd34256de9b47b44d084bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in darshanno1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed53ddb4a7d140a14e73dd1e70f0fca72e84826fd5c4675adfec2c75506b2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28814

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device...

CVE-2022-22522 Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device...

Malicious code in gramin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aedce7c5914ad854598a48f88963dd961ba8d80aadb85f017ac9b72ba168af40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sn-par-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2115af5e8c7f88004a13cc3253254769c561db84c32bde740ad847af36431692 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dydxprotocol/perpetual (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd38c13c01f594c005c07a305e5864fa811fee9530bf85ef8f6e061b5e21bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luajit-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 718bc56e7c32d3ab48a03462901c3da867a613c8367e983f81983b6df739286d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6518 Malicious code in testhawaii123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b622e00e5b47c0f7e724899d169d92211866c0130b21dfadad37992e6f5215 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81133afd96840f03b4b34fcc3f650cf01fa899ee95fac5471d1b540947833c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1175 Malicious code in auth-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affca85a0c8e959151ae1b55f6bbc3ac15b328ded165ddd269918b33ab725cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3877 Malicious code in internallib_12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf4a785077cebf8e4fe9b848bec7e3e294a5737229959fb0b83e2c61f206d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...