Design/Logic Flaw

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

Malicious code in solidity-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adef035708c56e9f6cce417f26ec5967eaf0a0e639c18e8c140d6e92ffdaef9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8074 Malicious code in newtesttocheckscanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ab43db32f51d45b83fb229cf4e2084b90f91beafb1a99342651c5693073ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8071 Malicious code in eth-web3-tx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c442b5b546b5967c812942b37c649d2e7caa2675e942bd96ddf40cbee1174f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

CVE-2023-31067

TSplus Remote Access (through 16.0.2.14) has a permission misconfiguration: there are Full Control permissions for Everyone on directories under %PROGRAMFILES(X86)%\TSplus\Clients\www. This could enable privilege escalation by a different local user. CVSS v3.1 base score 9.8 (Network, Privileges ...

PT-2023-23130 · Tsplus · Tsplus Remote Access

Name of the Vulnerable Software and Affected Versions: TSplus Remote Access versions through 16.0.2.14 Description: An issue was discovered in TSplus Remote Access where some directories under %PROGRAMFILESX86%TSplusClientswww have Full Control permissions for Everyone. Recommendations: For...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

CVE-2023-31068

TSplus Remote Access up to 16.0.2.14 has overly permissive ACLs: Full Control for Everyone on directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes. CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8). Root cause is insecure directory permissions; no remediation details are provide...

CVE-2023-31068

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\UserDesktop\themes...

CVE-2023-31067

An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILESX86%\TSplus\Clients\www...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain full control over the application through the VRDP network...

Malicious code in ivr-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998726f9d073fda61804b91c9c090376845bd077a3322770715d7c1f37d03449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-7877 · Phoenix Contact · Phoenix Contact Multiprog +1

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR SDK affected versions not specified Description: The issue is related to an Incorrect Permission Assignment for Critical Resource, which allows an unauthenticated remote attacker to...

MAL-2023-7983 Malicious code in emon78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f0edc650da505afa8dc8f6771ea545e69d9082314fd142e36e647658943fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emon78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f0edc650da505afa8dc8f6771ea545e69d9082314fd142e36e647658943fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7984 Malicious code in emonn-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 077262f600237c05a5783890d1b32eed35f9068d01b75efa3e8f612e603af7b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7978 Malicious code in react-navigation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac24ada2566f97d5be199f6ef9006e9556055d6747f993a8b1ae0dfb8b66a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...