MAL-2022-6864 Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rnx-kit-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ad390d0772ff1590bca749d5cab8846da9996e1933c13fc52ae4ef9bfde8d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5829 Malicious code in rnx-kit-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ad390d0772ff1590bca749d5cab8846da9996e1933c13fc52ae4ef9bfde8d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3825 Malicious code in ing-kit-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f848b88df8633c5af2c7442a7c90bb78ed5eb5597fb28786966fe4cbc5f83e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cybernated/core-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583d74dfe9c810d3ddd6e71a070b7a29cea19002f5505e8cf0406110d7fc67cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006efe3422350c297cf4e99ba62f060d3768219a2edfd93ba2de5a313e7f6325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-extensions-server-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62c5c5dd9010448134993984fa17538a55c6ac68f350f4c9ba81c827f54645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6754 Malicious code in ui-extensions-server-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62c5c5dd9010448134993984fa17538a55c6ac68f350f4c9ba81c827f54645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de66f690acbb62cee826234fc58f16d56e1adcedc66f23059dcef93e5b1f158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

PT-2022-2970 · Intel +9 · Sgx Psw +12

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to incomplete cleanup in specific special register write operations, which may allow an authenticated user to potentially enable information disclosure via...

CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

CVE-2022-30308 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

MAL-2022-828 Malicious code in acronis-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431e7c9d70568e5dfdc18aeb99d4ffddb22487462dea0588b1b5d29feebf36c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MakeMoney malvertising campaign adds fake update template

Malware authors and distributors are following the ebbs and flow of the threat landscape. One campaign we have tracked for a numbers of years recently introduced a new scheme to possibly completely move away from drive-by downloads via exploit kit. In this quick blog post, we will look at this ne...

OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

SUSE: Security Advisory (SUSE-SU-2022:1891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:1869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...