CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

Path traversal

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

CVE-2022-2788

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

CVE-2022-2788

CVE-2022-2788 affects Emerson Proficy Machine Edition 9.80 and earlier. It is a ZipSlip-style path traversal via the upload procedure (..\Filename) that can plant a malicious .BLZ file on a PLC and potentially execute code when transferred to Windows. Mitigations discussed in connected sources in...

Security Bulletin: IBM Tivoli Storage Manager FastBack Mount Buffer Overflow (CVE-2015-0120)

Summary IBM Tivoli Storage Manager FastBack Mount might be vulnerable to buffer overflow from the network or local machine. Vulnerability Details CVEID: CVE-2015-0120 DESCRIPTION: The Mount from IBM Tivoli Storage Manager FastBack 6.1.11 and earlier versions might be vulnerable to buffer overflow...

Malicious code in wexack-node-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280fed3d8637aa96a9752d788f7ffb037922023a05290834a384a70021b85361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tioredks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82288406f42e0b41e971b9c88fd0ad2e804534b72a105b490c59b8848cae6035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seacpe-string-regexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ff0f30301cb0cb08946202fc53f1f20e2971d9a6034f12c3bd0f7200050eb14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pplitu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f91f939544c8901433fd348d4b79123a3906986ac39f94771716b5c3b5814d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invairant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b122d04889a29a7d294f43451ea01c605d7f9bfcc1f98f86024c69b8007b2a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-contrib5-cop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaed4f8e5074c4986a639e08d41128df82425a2ecf9086e67025287e52d1564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in content-tep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8ff2832379350eee368aa48f6145f678929ced04843d9e5526597e8ca6a35cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rawoader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394b28028a1468e99b7aa88c13b6f076a880557557828f7af2c1984102127348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcssfvlgexugsfixes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39897524ed2b285ac6faa5e1db086649824026c37cb36266d3181dda6db746da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc92b2f82fd895fd66598ba50fff6e0c77ee613b3c157b32577d9d5c8470929d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in possnested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5499bf98d70d34501138bf621598f52c8d37bd13386e067ef0f46d7e030468a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guljshint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2631200c464ded493243d1cae6422ded696465305c19a3bb1ef0406cc5299b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...