PT-2023-18479 · Qualcomm · Sd205 Firmware +248

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves arbitrary memory overwrite when a virtual machine gets compromised during a transaction write, leading to memory corruption. Recommendations: At the moment, there is ...

Malicious code in @calizahq/react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736249350ff22b093bcff8631c4b2722b245bb27b2ef003fdf490a7171dc3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d196877cc4a07d7fc4ab1f9662861e68702c57f8f4b5ef2a5b28d0f2b8db41ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-screen-reader-announce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc94449e1dfbaea67fc7604cd192d90a355930f498364278937ae27e64050540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-logger-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c81d36303d3e14463172a01a3d04fd2b8b0456c22bc8fcbc4df9fc4c27ac65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2660

Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...

Hardcoded credentials

Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...

CVE-2022-2660

CVE-2022-2660 affects Delta Electronics DIALink (Industrial Automation server) v1.4.0.0 and earlier. The vulnerability stems from the use of a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive data and compromise the machine. Impact is high/critical depending on met...

Malicious code in iconape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57f3407957138b96309d3b47da05b8801a335251c498af9f9cf3bc23122171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Delta Electronics Industrial Automation DIALink 信任管理问题漏洞

Delta Electronics Industrial Automation DIALink is an industrial automation IoT device from Delta Electronics Taiwan, China. The Delta Electronics Industrial Automation DIALink suffers from a security vulnerability that stems from the susceptibility of the affected product to the use of hard-code...

Malicious code in wexack-node-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280fed3d8637aa96a9752d788f7ffb037922023a05290834a384a70021b85361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seacpe-string-regexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ff0f30301cb0cb08946202fc53f1f20e2971d9a6034f12c3bd0f7200050eb14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pplitu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f91f939544c8901433fd348d4b79123a3906986ac39f94771716b5c3b5814d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invairant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b122d04889a29a7d294f43451ea01c605d7f9bfcc1f98f86024c69b8007b2a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-contrib5-cop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaed4f8e5074c4986a639e08d41128df82425a2ecf9086e67025287e52d1564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in content-tep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8ff2832379350eee368aa48f6145f678929ced04843d9e5526597e8ca6a35cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rawoader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394b28028a1468e99b7aa88c13b6f076a880557557828f7af2c1984102127348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc92b2f82fd895fd66598ba50fff6e0c77ee613b3c157b32577d9d5c8470929d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcssfvlgexugsfixes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39897524ed2b285ac6faa5e1db086649824026c37cb36266d3181dda6db746da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...