Malicious Package

Overview orion-web is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in chat-orion-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4628213ffac8a813a7edc5f3695d74c53a07ac707ecdc13c21a753bf4a865a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1889 Malicious code in chat-orion-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4628213ffac8a813a7edc5f3695d74c53a07ac707ecdc13c21a753bf4a865a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview chat-orion-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

MAL-2022-5122 Malicious code in orion-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83219301e473e409aea2a45d605dabed29dc41a4c86319f3cdf8fcfeb2699797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orion-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83219301e473e409aea2a45d605dabed29dc41a4c86319f3cdf8fcfeb2699797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Securing the software supply chain, with Kim Lewandowski: Lock and Code S03E13

At the start of the global coronavirus pandemic, nearly everyone was forced to learn about the "supply chain." Immediate stockpiling by an alarmed and from a smaller share, opportunistic public led to an almost overnight disappearance of hand sanitizer, bottled water, toilet paper, and face masks...

MAL-2022-5123 Malicious code in orion-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8aa15eb66151939e86100689fb757fc16fe120517dedab8aaa1b62b61faf5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orion-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8aa15eb66151939e86100689fb757fc16fe120517dedab8aaa1b62b61faf5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

orion-srl.com Cross Site Scripting vulnerability OBB-2564301

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SolarWinds Orion Platform 2020.2.0 < 2020.2.4

The version of SolarWinds Orion Platform installed on the remote host is prior to 2020.2.4. It is, therefore, affected by a vulnerability as referenced in the orionplatform202024 advisory. - This vulnerability allows remote attackers to execute escalate privileges on affected installations of...

SolarWinds Orion Platform Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of alert creation. The issue results from the lack of proper validati...

VulnCheck KEV: CVE-2019-9546

SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service...

FBI, NSA and CISA Warns of Russian Hackers Targeting Critical Infrastructure

Amid renewed tensions between the U.S. and Russia over Ukraine and Kazakhstan, American cybersecurity and intelligence agencies on Tuesday released a joint advisory on how to detect, respond to, and mitigate cyberattacks orchestrated by Russian state-sponsored actors. To that end, the Cybersecuri...

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring allows a intruder to escalate their privileges or execute arbitrary code.

The vulnerability of the “Log alert to a file” component in the SolarWinds Orion Platform software for network monitoring involves unlimited uploading of dangerous files. Exploiting this vulnerability could allow a malicious actor to increase their privileges or execute arbitrary code...

Vulnerabilities fixed in SolarWinds Orion

SolarWinds has fixed vulnerabilities in Orion. The vulnerabilities marked CVE-2021-35234 and CVE-2021-35248 allow an authenticated malicious person to gain access to user data, including hashed passwords and information about salts used. In addition, a malicious person with alert management...

CVE-2021-35248

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings...

CVE-2021-35234

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...

CVE-2021-35248

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings...

CVE-2021-35244

The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution...