Malicious code in helios-ultra-rollup-plugin-gridsome (npm)

The package helios-ultra-rollup-plugin-gridsome was found to contain malicious code...

Malicious code in ichnology-helios-grus-vuetify (npm)

The package ichnology-helios-grus-vuetify was found to contain malicious code...

Malicious code in mocha-helios-postgres-registry (npm)

The package mocha-helios-postgres-registry was found to contain malicious code...

Malicious code in sedna-helios-apex-antares (npm)

The package sedna-helios-apex-antares was found to contain malicious code...

Malicious code in altair-helios-start-sass-loader (npm)

The package altair-helios-start-sass-loader was found to contain malicious code...

Malicious code in australis-foundation-helios-antares (npm)

The package australis-foundation-helios-antares was found to contain malicious code...

Malicious code in betelgeuse-sirius-helios-elara (npm)

The package betelgeuse-sirius-helios-elara was found to contain malicious code...

Malicious code in cryptography-blackhole-helios-meteor (npm)

The package cryptography-blackhole-helios-meteor was found to contain malicious code...

CVE-2020-5782

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wantype’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection...

CVE-2020-5781

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file /etc/config/luci by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users...

CVE-2020-5783

In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms...

MAL-2025-3673 Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @johndeere-tech/helios-mat-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @johndeere-tech/helios-ng-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @johndeere-tech/helios-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @johndeere-tech/helios-mat-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226a36baff3a45f171643849384a2b5ba6f9120f2a98d58b2589fc9381fc1c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b3379997f7c1fa963e3f0022064669ccae41425799fd8d62cbcda0d2d01651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

at.molindo:helios-client (>=0.9.11, <=0.9.13), at.molindo:helios-testing (>=0.9.11, <=0.9.13) +55 more potentially affected by CVE-2024-25638 via dnsjava:dnsjava (2.1.6)

dnsjava:dnsjava MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on dnsjava:dnsjava and may be impacted: - at.molindo:helios-client =0.9.11, =0.9.11, =0.9.11, =0.9.11, =4.0.1, =4.0.1, =4.0.2, =4.0.1, =4.0.1, =4.0.1, =4.1.0 -...

helios-treppenlifte.de Improper Access Control vulnerability OBB-3773567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

helios-servis.cz Cross Site Scripting vulnerability OBB-3257513

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...