Malicious code in puik-experimental (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82937cb1c93ef762188c789cd675a66b756f28c87484b4001febf9ba86792729 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fabric-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031f95a39929ba0a778100655abe80c8b7455a55f5e2d1dea13b6bd2dbb3bd16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer

This exploit is a Python script designed to exploit the CVE-2023...

CVE-2022-48222

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full...

Malicious code in @zillow-types/constellation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f570ad44977228dd333e2cc8ca47ab2bc8b05f057f2d4125c5549f3dd8f1c7f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kemnasa-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e53e1596af827447edef4919e4a6f003dcb35cfd0e674d6062c2a626982249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0432

The CVE-2023-0432 issue affects Delta Electronics DX-2100-L1-CN routers, where the Web Configuration Service contains an authenticated command injection vulnerability. Exploitation could allow an attacker with web service credentials to execute OS commands as root, potentially compromising the de...

Malicious code in yahoodotcom-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb0a9ae16cfadd970962e84bc11d082b5a7354335f88909193d51c5a759a1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tdv2-applet-monalixa.store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c1d448a144690b4cb560c6addca919072d44b799f174ae3bcc148bb25a81308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in td-service-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795a528873994ea135446c861a7fc9cb20977c13cafcb0b58ecc4f691614de90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tdv2-service-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4717bc8c34854233c77434f3a33ad98f6e14140713eadbdd2bb539be09193daa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sa-club-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ec22686cd96cc265b760943a47162bbd00a00c3ca60478a5388cd11b84fcbff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat Advisory: 3CX Softphone Supply Chain Compromise

Cisco Talos is tracking and actively responding to a supply chain attack involving the 3CX Desktop Softphone application. This is a multi-stage attack that involves sideloading DLLs, seven-day sleep routines, and additional payloads dependent on a now-removed GitHub repository for Windows-based...

Malicious code in testing-dummy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 134e6deeec000537eb2ce8b8c8f531fc97c037638ba5d40ae80e0231861cc595 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cirrus-matchmaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 086ee48f51dc34391e9a296e791f83f5fad1d81e111f0ef00e0691d1f7b313ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca77890c1dc9000f839accc01fdf6d95cbbbe1ee8d5bdf0caa651e3b2d8686d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @miro-site/ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183b4fea73bd0ece44c3d474c9357406101e8b174047197127d72219aee8ac3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Veritas Technologies Veritas NetBackup 代码问题漏洞

Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A code issue vulnerability exists in Veritas Technologies Veritas NetBackup versions prior to 10.0, which stems from a flaw in the way DLL paths are verified prior...

Malicious code in starbuckssystem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e18ed0052a42d62686c598273bcac8bb23988607df0ebe2362b653cc3c1ea3cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-16796 · Aruba · Aos-Cx Network Analytics Engine

Name of the Vulnerable Software and Affected Versions: AOS-CX Network Analytics Engine affected versions not specified Description: The issue is an authenticated remote code execution vulnerability. Successful exploitation results in the ability to execute arbitrary code as a privileged user on t...