Malicious code in stale-props (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b9ec16df0705291e585234cf48aa58f355eadeaf165424181e35c728757468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hardcoded credentials

All versions of ETIC Telecom Remote Access Server RAS 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on the filesystem, fill the hard disk to full...

PT-2022-6324 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a weak encoding for a NDMP password in Dell PowerScale OneFS. A malicious and privileged local attacker could potentially exploit this, leading to a full...

Malicious code in jquery_ui_checkbowwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355813cd2a93a9e682c5c08d18c2a94a88961692b4d92bb41d931a48b70fcfb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skywriter_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 391ab3a1146fadea35d9f633e91c514a4ae480067365a336ccd8489f7bf4bb53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37903

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system...

Malicious code in rdocumentation-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7c18abaa468c33663ce6c3e956d6d03af4e651a7996d21ec1f5466d8c99fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reviewstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130d9339d26189f3ef5b6a77ef657b20e163fe7d4698d7631189150ba226a4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37913

Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a...

CVE-2022-37914

Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a...

CVE-2022-37915

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o...

Design/Logic Flaw

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o...

Aruba Networks EdgeConnect Enterprise Orchestrator 安全漏洞

Aruba Networks EdgeConnect Enterprise Orchestrator is a centralized SD-WAN management solution from Aruba Networks, Inc. It provides optimization, management, automation and real-time visibility and monitoring features for enterprise users. A security vulnerability exists in Aruba Networks...

Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞

Aruba Networks EdgeConnect Enterprise Orchestrator is a centralized SD-WAN management solution from Aruba Networks, Inc. It provides optimization, management, automation and real-time visibility and monitoring features for enterprise users. Aruba Networks EdgeConnect Enterprise Orchestrator...

CVE-2022-37915

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o...

CVE-2022-37915

CVE-2022-37915 affects Aruba EdgeConnect Enterprise Orchestrator 9.1.x prior to 9.1.3.40197. The vulnerability arises from inadequate access control in the web-based management interface, allowing an unauthenticated remote attacker to run arbitrary commands on the underlying host and potentially ...

CVE-2022-37915

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o...

Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherscantokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08565aab0bb06e0742775d766bd5fbb60b366b08e0237deab90cdde12e1efe36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...