CVE-2022-32224

An insecure deserialization flaw was found in Active Record, which uses YAML.unsafeload to convert the YAML data into Ruby objects. An attacker supplying crafted data to the database can perform remote code execution RCE, resulting in complete system compromise. Mitigation Mitigation for this iss...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2022-21512

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise...

SICK FTMg 安全漏洞

The SICK FTMg is a flow sensor from SICK. A security vulnerability exists in SICK FTMg versions prior to 2.8, which stems from the fact that an unauthenticated user can access sensitive Web URLs via a GET request, which should be limited to maintenance users only. A malicious attacker could use...

Malicious code in ptokens-erc777-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fc4905dd4499db04626039e0832f1740c47a94321f71c7e55611e7530ffc08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in headless-obyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a746248cdd3fa9fc000729a31a09edc3476b4ad4cbdec19c121fb0ca07fb77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in morpho-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f3ec7e427f04c94877dd7cda6c4683901ede352cb5946fa52448af8246dfaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f45ba64efd280166d92cd3cbae66211e667608660eea775f6b2c6fad385e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62488af56327cd0a22202bb93f65eff0b4070ab64d1c9a6197f8030c66504bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8540a7a2f8830a279ceef3df3b67be2f9f9fc49b5a20fae5000a5caf839288a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ckvmqjksghytofel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 418c8ec2390c0ae00ab93c6cd711d9cdd00232125f519b470ecf9b4b929df596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zjdkvqcxmknipaye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91bb2e968fe7009c7db69c83e44f8b3f0a528992e3be20cb30a64f770b04405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bc-image-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9a3588bff533b8322b9e36266236764d4c1404bc04e9480315d04aa9a292a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eazyminer-fsdjufhsdjf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c8be84e8ae67320708844e1557f373936fb489c266731dd26ae291278655ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pasirntlfhxmywcg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8f42f8c63ae19d93b2e47014b0c0ffddc2516091655cc68a88ac011d0cca56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nmgpvbyzeufscxjh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef3cb78242f21839f9932efac0bec33fa4eb78d39d685bdb5541e2d2a9055c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lnuhfadctpvbwrsj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0fc4102a37e0cee8ba8d5a6e17a44aa54e889337064af2ca9aabce028b51bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chnifdwmostgqvyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d223f188c8184fb1a53623f8bf5fb09e9e4038b90281daf75effac1cc06faeb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jclqbomyxrkfwpug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea20fdd0b0d177ae14c2a2f991980533d4b356ab07bebf021ba981c2206d8fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...