CVE-2021-3563

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity...

Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-10472

Name of the Vulnerable Software and Affected Versions openstack-keystone affected versions not specified Description A flaw was found in openstack-keystone, where only the first 72 characters of an application secret are verified. This allows attackers to bypass some password complexity that...

Ubuntu: Security Advisory (USN-361-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2022-6788 Malicious code in uniswapmempool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d768774cc5a9b627d47741581f1755f473adf7e517b03a72cf7a0028da8b52ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in suqin-node-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4735520a9eb1b6ee4c243d3e75c6ca5a9c68db8212f86f87924c20fa0c0e3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in antcloud1111-node-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e38bc349b4efa5145b23d0109efac1388bec7a1a8106d94aeb4870c6c7822c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in freekws-devportal-api-client-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apii-trueid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5a4d6175e0895549e948f45da69320f2c20cf6ede9d7fff4cb751525b06140c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2022-1847 gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 also known as PGP. GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fixes: GnuPG...

Malicious code in xpostcss-loadsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7b25fd3ba45c53cf0e0120c9ca6bb1bd8b9f3ef554a6d2d5341d09e13f3ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6901 Malicious code in ve-loaer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f591aa173fa95037c0279b301e3fe1d86b8db7b3165221944fb20fd10021e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7062 Malicious code in weact-d5tepicker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88191763d06079f123e8ea153e0e7e894484e9669039110460ac8f8c819a4ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7003 Malicious code in vuez-template-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf4115988e70fed761d8f3611ce6b309fa2efe3560f15a0a66e9471e34fe3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7052 Malicious code in wbpac-hot-middwleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0020f3d8a3814db48c3c26e4056e2056c8a00aa74c7fdd322b26b44a9a2acac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xmdzdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd2af82c7ec5d3ff6fa638c6c089e7c66d6ff4d7a360bad512f65513623033bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2615 Malicious code in duplex-child-rocess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3ec325a6dc92f083b06d506e89526c20430b1740c4af5e7d3df470e48c455f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7262 Malicious code in xbcrypt-nohejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a163e76793bb0dbc34106a413a795841bbd0b71e5bd37a82afa667022e39b653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6893 Malicious code in vazliwd-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e408cdbae31213981fd1e549a341cc54e9c7cc90ff6788b713f32db5c65d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttpd-erors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7cfaf86aa84f85ddcc2384589a0732cb6e79e95d881cc501535571df062ffe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...