MAL-2022-4444 Malicious code in machine-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c368602ddffcde3e255807da9c94c25aa86d5780ec4ccb89406d97735c70265f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in machine-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c368602ddffcde3e255807da9c94c25aa86d5780ec4ccb89406d97735c70265f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in machine-mapper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in equipment-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3407a23fc3cc61936f89d5486c466c993a250e52c464d3066026122fd8f8a2ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Database Server Java VM Data Access

The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, or delete data using the Oracle Net protoc...

[SECURITY] Fedora 35 Update: xe-guest-utilities-latest-7.30.0-4.fc35

Scripts for monitoring XAPI project virtual machine. Writes distribution version information and IP address to XenStore. This package follows the latest version of xe-guest-utilities upstream...

CVE-2022-35404

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine...

Planet Labs: Api data leak

A security vulnerability was identified where sensitive API keys were exposed through archived data accessible via the Wayback Machine. Some of these API keys were found to be valid...

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple's operating systems that, if successfully exploited, could allow attackers to escalate device privileges and deploy malware. "An attacker could take advantage of this sandbox escape vulnerability to gain...

Pakistani Hackers Targeting Indian Students in Latest Malware Campaign

The advanced persistent threat APT group known as Transparent Tribe has been attributed to a new ongoing phishing campaign targeting students at various educational institutions in India at least since December 2021. "This new campaign also suggests that the APT is actively expanding its network ...

Security Bulletin: Watson Machine Learning Accelerator is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22971)

Summary Watson Machine Learning Accelerator is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22971 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast t...

[SECURITY] Fedora 36 Update: xe-guest-utilities-latest-7.30.0-4.fc36

Scripts for monitoring XAPI project virtual machine. Writes distribution version information and IP address to XenStore. This package follows the latest version of xe-guest-utilities upstream...

Malicious code in osbynpeglvtwqumx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031404e817d781fe20897f50a9d3f77b3c5f2f25245a62a8c7dcd91fd894de51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isvyfkbxhnjmzakg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3547c72809f19e5063bb5259146edc9eb6b178ea4d45c961ff926a89f0b8ce2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ronbhdcvpqkxwgei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c89cc5b81049d91444be4acb8581342dbbb6ba937491e593eb64e998c1a813b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41037: Inclusion of Functionality from Untrusted Control Sphere

In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoints during installation. Those touchpoints can, for example, alter the command-line used to start the application, injecting things like agent or other settings that usually...

Frontier security vulnerabilities

Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ethernet Dapps. Frontier suffers from a security vulnerability that stems from the truncation done during the conversion between EVM Balance Type and Substrate Balance Type being incorrectly implemented, resulting in...

CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...