242 matches found
Malicious code in ketcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76787cc9f59e7dfbd12bdff84da011b5cef51b6593009abc4b08c6ae5b18cc91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in finage-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e145700f3957bf65e5c69e9c072562fd70d52ae071f526a0ebcef0d5ab406ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in arm-templatespecs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265ed71b7ec86d01a27366b7f820744537c71a0fdb61b621f22d0f6225d97b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in synapse-access-control (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81115e92f8431e03d9f4916ec0eca880aba3fb98d918ca6e1aca89e0df7e9fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gd-user-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f8c4667e1ba1cf0b991c3e4aa7d507fb454eff764c8d233a48cb8b81839b61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in leypamfdtqqmjky (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abc0bf953ef2256ceb19f14801f0b45a3077eee7d698ff3673e63757252eb5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in holvi-validation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5460a2a5a97e4820eee0a96ea4c76758e1b0cb8bd86d8c71dc5c8ae6dd29b600 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vso-workbench (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83ff4e45823ca3ebdebc2d5dd79142cc80f0747161b2555e2593073956d4318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in misk-web-tab-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae44bd45f2d6f157c92c9718c7782e0c142805e9ced92eb727a61c1e72098c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wormhole-icco (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad0e4f91c8527b42331c43875fd2101ac552b47ac0af2476a52586992154a6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-dom-router-old (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 982577f3dd90dc874a760dcdc2288ddccc947f0a8410d5ab383e2350556ca1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in starter-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9210f72432e30c8a8971391592a1868df8981aa891e80a7af8dbd2822f1b499d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package in regenraotr
All versions of regenraotr are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation This...
Code injection
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI formerly InTouch Machine Edition prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine...
CVE-2019-6543
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI formerly InTouch Machine Edition prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine...
CVE-2019-6543
AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI formerly InTouch Machine Edition prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine...
PT-2019-18155 · Aveva · Intouch Edge Hmi +1
Name of the Vulnerable Software and Affected Versions: AVEVA Software, LLC InduSoft Web Studio versions prior to 8.1 SP3 AVEVA Software, LLC InTouch Edge HMI formerly InTouch Machine Edition versions prior to 2017 Update Description: The issue allows code to be executed under the program runtime...
CompuSource Systems Real Time Home Banking - Local Privilege Escalation
CompuSource Systems Real Time Home Banking - Local Privilege Escalation Exploit Title: CompuSource Systems - Real Time Home Banking - Local Privilege Escalation/Arbitrary Code Execution Date: 2/25/16 Exploit Author: [email protected] Vendor Homepage: https://www.css4cu.com :...
Solaris 7.0/8 Xsun Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1140/info A buffer overrun vulnerability exists in the Xsun X11 server, as shipped as part of Solaris 7 and 8 from Sun Microsystems. By supplying a long argument to the -dev option normally used to set the output device, ...
Researchers unveil persistent BIOS attack methods
Apply all of the browser, application and OS patches you want, your machine still can be completely and silently compromised at the lowest level–without the use of any vulnerability. That was the rather sobering message delivered by a pair of security researchers from Core Security Technologies i...