MAL-2022-696 Malicious code in @unpkg-semver/pedops-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b5459fd755d4527552fb55fb90015ab04eee1a1afd2678656b04c0ea32ec19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64f8c329a9c21154f5dbd9498d31129a5b600e07e6845b8a00638ebd69847b41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1126 Malicious code in arui-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64f8c329a9c21154f5dbd9498d31129a5b600e07e6845b8a00638ebd69847b41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-406 Malicious code in @maalik/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c90984124534f66b230ac2eb92a0364a88b33f5c02db2cba4e3a47086f9f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2384 Malicious code in dds-client-side-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 318019c57360d471a710966a26764b42192d586410a51b7e7c1a53b53d5c3b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in klook-node-framework-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7e4d6c6021022e6b3003b4d5c34f53d48767cb50cdc35f94b30d527e19e4f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4187 Malicious code in klook-node-framework-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7e4d6c6021022e6b3003b4d5c34f53d48767cb50cdc35f94b30d527e19e4f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TYPO3 Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-002)

TYPO3 is prone to an information disclosure vulnerability via exception handling/logger. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger

More info at https://typo3.org/security/advisory/typo3-core-sa-2022-002...

Solar-Log GmbH has an unspecified vulnerability

Solar-Log GmbH is a data logger for monitoring PV plants from Solar-Log Germany. version 2.8.4-56 and 3.5.2-85 of Solar-Log GmbH contains a security vulnerability that can be exploited by attackers to cause privilege escalation...

Solar-Log GmbH 安全漏洞

Solar-Log GmbH is a data logger for monitoring photovoltaic power plants from the German company Solar-Log. A security vulnerability exists in Solar-Log GmbH versions 2.8.4-56 and 3.5.2-85 that stems from a faulty component network configuration. An attacker could exploit the vulnerability to...

Solar-Log GmbH 安全漏洞

Solar-Log GmbH is a data logger for monitoring photovoltaic power plants from the German company Solar-Log. A security vulnerability exists in Solar-Log GmbH versions 2.8.4-56 and 3.5.2-85, which can be exploited by attackers to obtain sensitive information...

Solar-Log GmbH 安全漏洞

Solar-Log GmbH is a data logger for monitoring PV plants from Solar-Log Germany. version 2.8.4-56 and 3.5.2-85 of Solar-Log GmbH contains a security vulnerability that can be exploited by attackers to cause privilege escalation...

Solar-Log GmbH 跨站请求伪造漏洞

Solar-Log GmbH is a data logger for monitoring photovoltaic PV power plants from the German company Solar-Log. A cross-site request forgery vulnerability exists in Solar-Log GmbH versions 2.8.4-56 and 3.5.2-85, which stems from the component's lack of data filtering and escaping...

Solar-Log GmbH 安全漏洞

Solar-Log GmbH is a data logger for monitoring photovoltaic power plants from Solar-Log GmbH, Germany. A security vulnerability exists in Solar-Log GmbH versions 2.8.4-56 and 3.5.2-85, which stems from an unknown function of the component configuration handler. An attacker could exploit the...

Solar-Log GmbH 代码问题漏洞

Solar-Log GmbH is a data logger for monitoring photovoltaic PV power plants from the German company Solar-Log. A security vulnerability exists in Solar-Log GmbH versions 2.8.4-56 and 3.5.2-85, which stems from a faulty file upload in the component. An attacker could exploit the vulnerability to...

SSRF in /service endpoint

Description The problem came from this line of code I ran docker-drawio with following command : docker run -it --rm --name="draw" -e EXPORTURL=http://somesite.com -p 8080:8080 -p 8443:8443 jgraph/drawio if the drawio EXPORTURL is set to an address without any / after the primary Hostname like...

CVE-2022-1357

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...

Command injection

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...

CVE-2022-1357 Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...