32 matches found
PT-2023-30397 · Unknown · Dokmee Ecm
Name of the Vulnerable Software and Affected Versions: Dokmee ECM version 7.4.6 Description: The issue allows remote code execution due to the response to a "GettingStarted/SaveSQLConnectionAsync //gettingstarted" request containing a connection string for privileged SQL Server database access...
Malicious code in plugin-getting-started (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b95fa1847620d5c168b65bdb2d2753b26090a68b3c1f7846edd359a80d3e34f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8504 Malicious code in plugin-getting-started (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b95fa1847620d5c168b65bdb2d2753b26090a68b3c1f7846edd359a80d3e34f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ruckus Wireless Ruckus CloudPath Cross-Site Scripting Vulnerability
Ruckus Wireless Ruckus CloudPath is a network access control NAC solution for managing the identity and access rights of network users, especially in Wi-Fi networks. Its goal is to provide advanced network access management and security features to ensure that users can securely connect to the...
Introducing Free Wordfence Intelligence WordPress Vulnerability Webhook Notifications!
We’re incredibly excited to announce that we have launched a webhook integration for vulnerabilities as part of Wordfence Intelligence, which enables users to stay on top of the latest vulnerabilities being added to the Wordfence Intelligence WordPress Vulnerability database, all completely for...
Malicious Package
Overview codemirror-6-getting-started is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
MAL-2022-1973 Malicious code in codemirror-6-getting-started (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914fcab57c708e2ab3449d29b3ce1eb9437e02611bfb1333e905f9ae10c2eb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in getting-started-rpi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c58b0dc7334752e12c13feefb32c48d241c7cacaddf2442a12a6b1e271e9eae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3357 Malicious code in getting-started-rpi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c58b0dc7334752e12c13feefb32c48d241c7cacaddf2442a12a6b1e271e9eae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-32076
Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...
Run Command Line Interface with Hybrid Cloud Security
Learn how you can get started with running CLI commands against Trend Micro Cloud One™ services...
Backdoorme - Powerful Auto-Backdooring Utility
Tools like metasploit are great for exploiting computers, but what happens after you've gained access to a computer? Backdoorme answers that question by unleashing a slew of backdoors to establish persistence over long periods of time. Once an SSH connection has been established with the target,...