Malicious Package in luna-mock

All versions of luna-mock contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that compute...

PT-2020-21535

Name of the Vulnerable Software and Affected Versions hpmm versions affected versions not specified Description The issue concerns malicious code within the hpmm package, which uploads system information to a remote server, downloads a file, and executes it. This indicates a severe compromise of...

PT-2020-21015

Name of the Vulnerable Software and Affected Versions sj-tw-abc versions affected versions not specified Description The issue concerns malicious code within the sj-tw-abc package, which downloads and runs a script. This script opens a reverse shell in the system, potentially giving an outside...

Malicious Package in colour-string

Version 1.5.3 of colour-string contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and key...

CVE-2020-8602

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution...

CVE-2020-12107: Improper Neutralization of Special Elements used in an OS Command

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows command injection via a text field, which allow full control over this module's Operating System...

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain full control over the application.

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP protoc...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the User Interface component of the Oracle SD-WAN Edge application allows a hacker to gain full control over the application.

The vulnerability of the User Interface component of the Oracle SD-WAN Edge application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software arises from a race condition. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software arises from a race condition. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows attackers to gain full control over the application.

The vulnerability of the Server component, specifically the Security: Privileges section of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software arises from a race condition. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using the IIOP and T3 protocols...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows attackers to gain full control over the application.

The vulnerability of the Server component, specifically in the Security section related to system administration of the Oracle MySQL database, stems from insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

CVE-2020-14334: Insufficiently Protected Credentials

A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance...

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application...

PT-2020-3466 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite 6 Description: The issue is related to inadequate access control in Red Hat Satellite, allowing a privileged attacker to read cache files. These cache credentials could help the attacker gain complete control of the Satellit...