MAL-2022-4945 Malicious code in npm_test_nothing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2762093ac3ccb836bc8b7b5f620322cb4637be2e69a6c8128a2b3ba477ef46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general database management system for Oracle MySQL Cluster is vulnerable when operations are performed outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application through various network...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

The vulnerability of Huawei FLMG-10 Bluetooth speakers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to gain full control over the device.

The vulnerability of Huawei FLMG-10 Bluetooth speakers’ microprogramming software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to gain full control over the device by loading specially created malware files...

Critical Bug in Everscale Wallet Could've Let Attackers Steal Cryptocurrencies

A security vulnerability has been disclosed in the web version of the Ever Surf wallet that, if successfully weaponized, could allow an attacker to gain full control over a victim's wallet. "By exploiting the vulnerability, it's possible to decrypt the private keys and seed phrases that are store...

TikTok reset account password Exploit

Exploit can reset password and get full control any TikTok account. You can change target mobile phone without any problems, because exploit use bypass 2fa vulnerability...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain full control over the application

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when buffer overflows occur during data processing. Exploiting this vulnerability can allow an attacker to gain full control over the application through various protocols...

PT-2022-2365

Name of the Vulnerable Software and Affected Versions FLMG-10 version 10.0.1.0H100SP22C00 Description The issue is related to an improper authentication mechanism in the software, which can be exploited to gain control of the victim device. Successful exploitation may allow an attacker to load...

VulnCheck KEV: CVE-2018-0125

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system...

CVE-2021-4045

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera...

CVE-2021-4045 TP-LINK Tapo C200 remote code execution vulnerability

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera...

VulnCheck KEV: CVE-2017-12240

The Dynamic Host Configuration Protocol DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system...

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

The Dynamic Host Configuration Protocol DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system...

CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

eGeeTouch 3rd Generation Travel Padlock application 安全漏洞

The eGeeTouch 3rd Generation Travel Padlock application is a smart luggage lock from eGeeTouch, Inc. that provides simple and enhanced security for travel luggage to meet the travel experience of a growing number of travelers across the globe. A security vulnerability exists in the eGeeTouch 3rd...

The vulnerability of the SSH protocol implementation in the Dell Isilon InsightIQ performance monitoring and reporting analytics platform allows a hacker to bypass security restrictions and gain full control over the application.

The vulnerability of the SSH protocol implementation of the analysis platform for monitoring performance and generating reports in Dell Isilon InsightIQ is related to the use of cryptographic algorithms that contain vulnerabilities and risks. Exploiting this vulnerability could allow a malicious...

CVE-2021-43409

The “WPO365 | LOGIN” WordPress plugin up to and including version 15.3 by wpo365.com is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data...

CVE-2021-43409

The “WPO365 | LOGIN” WordPress plugin up to and including version 15.3 by wpo365.com is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data...