Malicious code in e2e-test-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6572edea50875b7a4383ee4b7dbed53e89120ed815f6699c7033f43c636fc189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco Webex App Installed

Binary data ciscowebexappinstalled.nbin...

PT-2022-17601 · Google · Jib-Core

Name of the Vulnerable Software and Affected Versions: com.google.cloud.tools:jib-core versions prior to 0.22.0 Description: The issue allows for Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input. Recommendations: For versions prior to 0.22.0, update...

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

MAL-2022-5871 Malicious code in runtlcontribconcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156a2ee2d37ee35d19e575401b36138616ad0ba895a6e9f93cbe2da0ed778b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2317 Malicious code in daeyjds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08daa8db1f03525bec8bbe01df5687ff8e10686d01465fe24003dce21a8711ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5422 Malicious code in possnested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5499bf98d70d34501138bf621598f52c8d37bd13386e067ef0f46d7e030468a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in changcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6d241c354b722e04857a6fafe338cfd691379722c9fd5fb85f78408d7647594 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zoho ManageEngine ADAudit Plus Installed (Windows)

Binary data zohomanageengineadauditpluswininstalled.nbin...

Python Installed Packages (deprecated)

This plugin is replaced by Python Installed Packages Plugin ID 181215. Binary data pythonpackagesinstalledwin.nbin...

Python Installed Packages

Binary data pythonpackagesinstallednix.nbin...

CVE-2022-20318

In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20332

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20322

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2022-20324

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

CVE-2022-20324

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...