Malicious code in fca-anjelov2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 730aafb848eae5cd60a92a1ea9c347a0d8943224bb472952511c4ad6ebb3ef43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-yukihira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570d6a44c1fdd0147a33b4f6d656e16f85034cd01f025749ecbbc0ebda2c03cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2baa7413e9468acd20ce003a6b7caa412c7a2e6cd7d941702add8ac4dcd0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @leesiwoo/fca-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8dec25cc111a5b3b0146bc3b1436ce0a77fed1c784460a1be82ace48ed2ab4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP NetWeaver Path Traversal Vulnerability (CNVD-2023-65181)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A path traversal vulnerability exists in SAP NetWeaver, which results from the program failing to properl...

MAL-2023-559 Malicious code in kteam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 855f8da840b51f09382b8e45d6a5b94dbbf7b833931b0d173d719ea2c8277741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-33989

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

Directory traversal

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

CVE-2023-33989 Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

CVE-2023-33989 Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

CVE-2023-33989

CVE-2023-33989 concerns SAP NetWeaver BI CONT ADD ON (versions 707, 737, 747, 757) with a directory traversal flaw that can overwrite system files. The root cause is improper path filtering, allowing an attacker with non-administrative authorizations (network access) to target OS files and potent...

SAP NetWeaver 路径遍历漏洞

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A path traversal vulnerability exists in SAP NetWeaver, which results from the program failing to properl...

Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-2-1880

2.1880 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

ROS-2-1203

2.1203 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

ROS-2-2028

2.2028 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command execution vulnerability exists in the Milesight UR32L urvpnclient cmdnameaction function, which can be exploited by an attacker to execute arbitrary commands on the system...

Command injection

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to full...

Malicious code in carbon-sageone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dd56dd7300d3e57844b0cda4d9223dc1874d2e0db91e2308fd11ff2ac5a2d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-824 Malicious code in sword123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6873abc1d5ac185b0cd7f13b940e3144dd46f0fddd5608e317c041de653e8bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...