Malicious code in prod_assets_web_modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3873af7a0edde4eed21f230bb2e4c4a23926d90dca82b6b70ca0b9f10258814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vc-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e43172fb253330392351dc3f66a6cc9263fc963e180e628d56596e60bd25aa18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6896 Malicious code in vc-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e43172fb253330392351dc3f66a6cc9263fc963e180e628d56596e60bd25aa18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-modules-bar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f9cd6a5a72506e73b8e308c027eaa27aa5e3828f3a8d5674d1d012382e714f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-547 Malicious code in @qw-app/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d45dadc6c0d3ec96d7cce0e5627717c32ca87ad34f248c77e958f64a3f258a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in preset-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bce4d502bf9ab093c7d390d5b71812207dacb59531230032226826562d298eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5453 Malicious code in preset-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bce4d502bf9ab093c7d390d5b71812207dacb59531230032226826562d298eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.modules.subsystems (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05cbc895a3e4b486e4065eb6ba2d3576299ff029a0d5a63231966eb05f2255b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AutomationDirect DirectLOGIC 安全漏洞

AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A security vulnerability in AutomationDirect DirectLOGIC, which can be exploited by an attacker to cause loss of sensitive device information, unauthorized changes, and denial of service conditions, affect...

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

Authentication Bypass

grub2 is vulnerable to authentication bypass. The vulnerability exists because the shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems, allowing an attacker to load unverified modules into GRUB and bypass secure boot protection mechanism...

AutomationDirect DirectLOGIC with Ethernet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: DirectLOGIC with Ethernet Communication Modules Vulnerabilities: Uncontrolled Resource Consumption, Cleartext Transmission of Sensitive Information 2. UPDATE OR REPOSTED...

Too many setToken modules may cause gas limit error

Lines of code Vulnerability details Impact Too many setToken modules may cause gas limit error. Has these impacts: 1. These setToken can't be initialized in NotionalTradeModule 2. Cannot remove any module from that setToken Proof of Concept / @dev MANGER ONLY: Initialize given SetToken with initi...

Malicious code in dashboard-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bed5786e244ce809de0caa8e23eb8d4725566cdad7f1d4d8f5f85a5f9286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2334 Malicious code in dashboard-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2616bed5786e244ce809de0caa8e23eb8d4725566cdad7f1d4d8f5f85a5f9286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GUnet Open eClass Platform 跨站脚本漏洞

GUnet Open eClass Platform is an integrated course management system for GUnet eClass. A security vulnerability exists in GUnet Open eClass Platform openeclass versions prior to 3.12.2, which can be exploited by attackers to conduct XSS attacks via the modules/auth/formuser.php auth parameter...

DRUPAL-CORE-2022-011

Updated 22:00 UTC 2022-06-10: Added steps to update without drupal/core-recommended. Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released two security advisories: Failure to strip the Cookie header on change in host or HTTP...

CVE-2022-28615

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in apstrcmpmatch when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use...

ALPINE-CVE-2022-28615

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in apstrcmpmatch when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use...

Out-of-bounds

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in apstrcmpmatch when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use...