Malicious code in reality-lens-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-heremaps-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebaf028ac6b37df270050931b5b8f28eccfbfc7f8d88bd84ca5a52919e604bc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in b64-svn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4462d12f5ac67a8c0dcfc8182a230ed7f7a51afa9722cfc8013217429517d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-85 Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-43885)

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability in versions prior to 112.0.5615.137. The vulnerability is due to the Service Worker API in the affected version allows remote attackers to potentially exploit heap corruption via specially...

Malicious code in photos-story-animator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358cb47b9a08355f8b423f06a058d4a0622e10984c25cbb4411a8d6868208882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oc-active-conversation-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af2f6d15b247e3f8fc944ad0ec5d9efe55a5163b89f729f53e819289a9102e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-21896

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Malicious code in vibranced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ed6cad6ab02580f42475881d01ec0af9fa2e95362a6d3238d934065d42f65e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris version 11, which can be exploited by an attacker to compromise Oracle Solaris by logging on to Oracle Solaris...

Oracle Solaris 安全漏洞

Oracle Solaris is a set of UNIX operating systems from the American company Oracle. A security vulnerability exists in Oracle Solaris version 10. An attacker could exploit this vulnerability by logging on to Oracle Solaris to compromise Oracle Solaris...

Malicious code in ynodejs_mod_log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 861d73fdebc783ac105077a9c4483c1c7e4528821dcd7c8e7b8a1e27bbed1f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uploadcare-redactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2b26c8a1379371f8342e7cc3df590d007ad66b38f343af92c1ed418277e70f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-uploadcare-widget-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524e985710633866c8a77431e4ded18aa911c225db74bb40da3457894383be3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Publisher 2013 Multiple Vulnerabilities (KB5002213)

This host is missing an important security update according to Microsoft KB5002213 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-27267

Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely...

Input validation

Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely...

CVE-2023-27497 Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely...

CVE-2023-27267 Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)

Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely...

Malicious code in puik (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b4305941a7c6039839f504cec86804482541da940624e283b54bd14652ed296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...