PT-2023-26465 · Aruba · Aruba 9000 Series Gateways +3

Name of the Vulnerable Software and Affected Versions: Aruba 9200 and 9000 Series Controllers and Gateways affected versions not specified Description: Vulnerabilities exist in the BIOS implementation that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker...

Malicious code in master-oracle-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5d683c33e479ccc6ca6bb739fae7fc1a6d64781f08d95866becdfdd08e26fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jupiter-emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cdeb64c52b36efc06236636a1e0aa43fe94095a27581170953f6c5119daf634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emon-testt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3e1ddd0c9bd0c6e361f9383435fa90d24ddfb9642622862818d1aecfe88d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-watch-asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01675c298edf41b4d5fe21203170b72f5e72730d4f4fc10d9714a6a8fe277408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bt-lotus-cicd/eslint-config-lotus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d77f679c79d9699e68511d896addd3fddc773bc3f89c4a8f38c6f763f68a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-dpd-rest-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57f29438d66f642d44c66209d9219a5bce9c31f2cdb3437e711193f13af28113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-mdong-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa3fe0ef5d71c1d6ecd9de7850834521703b63c9a7fd9f92cd6f8d9a887f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malfex_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf61c4d8d649d32458d1f89955b492660ca62652ac0c9410d9a9c07a54b3d546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in funcraft-api-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26cfbee7915882a36f6b1213f8779104f879b89ffc82f599aeecde077717859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-supportbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 216be1d91ea2a0a3d5d54d7033f16294c7c1df0f10f021e829986203e562d035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ivanti Addressed A New Zero-Day Flaw in Ivanti Sentry

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The zero-day vulnerability CVE-2023-38035 in Ivanti Sentry versions 9.18 and earlier allows unauthenticated access to sensitive APIs via port 8443, posing a risk of configuration manipulation and...

CVE-2023-37427

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on...

CVE-2023-37428

A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading t...

CVE-2023-37427

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on...

CVE-2023-37428

A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading t...

CVE-2023-37424

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...