Lucene search
+L

5643 matches found

Github Security Blog
Github Security Blog
•added 2024/01/15 6:15 a.m.•3 views

Malware in apiv2-fetcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/15 6:15 a.m.•4 views

Malware in djs14-fetcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/15 6:15 a.m.•2 views

Malware in chalk-color

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/15 4:53 a.m.•3 views

Malware in sync-axios

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/01/15 12:00 a.m.•15 views

The vulnerability of the intermediate installation process for microprogrammed software on the SIMATIC CN 4100 communication gateway allows a intruder to gain full control over the application.

The vulnerability of the intermediate installation process for microprogrammed communication gateway software SIMATIC CN 4100 is related to the use of default account data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application...

10CVSS7.7AI score0.00597EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/01/15 12:00 a.m.•18 views

The vulnerability of the intermediate installation process for microprogramming software on the SIMATIC CN 4100 allows a intruder to gain access to the system and obtain full control over the application.

The vulnerability of the intermediate installation process for microprogrammed communication gateway software SIMATIC CN 4100 relates to bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely gain access to the system and gain full...

9CVSS7.7AI score0.00528EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/12 3:18 a.m.•2 views

Malware in chancets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 6:55 a.m.•5 views

Malware in ember-cli-progress-ci

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 5:10 a.m.•2 views

Malware in moduleprefix

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 5:08 a.m.•3 views

Malware in nylas-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 5:08 a.m.•3 views

Malware in replit-extensions-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 5:08 a.m.•4 views

Malware in dynatrace-oneagent-nodejs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 5:02 a.m.•4 views

Malware in error-can-not-resolve-resource

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/11 5:02 a.m.•7 views

Malicious code in schibsted-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fdb3f96b7ef1c18a21e73ccf0e66681bb101c779b67ef16b78444bb7ce249f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/01/11 5:02 a.m.•4 views

Malware in bakery-dashboard

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 4:54 a.m.•3 views

Malware in sh.keptn.core.control

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 4:54 a.m.•3 views

Malware in gh-action-send-event

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/11 4:45 a.m.•1 views

Malware in @snip3rxd/ocore

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/01/11 12:00 a.m.•20 views

The vulnerability of the UpLoadAction class in the software for managing power sources of Voltronic Power ViewPower allows a perpetrator to execute arbitrary code and gain full control over the system.

The vulnerability of the UpLoadAction class in the software for managing power sources of Voltronic Power ViewPower Pro relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and gain full control over the...

10CVSS8.2AI score0.01483EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/01/10 5:00 a.m.•3 views

Malware in raspeditor

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder