Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-apps/api-ingestor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1475080989244adedec56990b4f047611496dd13042e21b835e7a53d0e4e7fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-plugin-added-by-parent-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e4eb992ae64e44e0964e3a0b46fbb4d1d22f0de7827450321de3eeabbb002b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0bc80ffed72bd61fae6dc05340437a775bd61cb786636c3fdc8ba346429cc9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adroit-f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d340a87917821f16332cc13efdd1a133abf2f230303f4245672e1e6307a146d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in payoneer-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3214dbcec3171e906276f2f56836328b487566481b00c467fff3e60a4be19ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquerry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6621de25a09d367339e4f62396aa977577ce456706c54bffefc8207bdadf871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Xiaomi Mi browser and Xiaomi Mint Browser input validation error vulnerability

Xiaomi Mi browser and Xiaomi Mint Browser are both lightweight web browsers from the Chinese company Xiaomi Technology Xiaomi. An input validation error vulnerability exists in Xiaomi Mi browser and Xiaomi Mint Browser, which arises from a network system or product that does not properly validate...

Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

PT-2022-2776 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system...

CVE-2022-26986

SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can even upload a malicious web shell to...

CVE-2022-26986

SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can even upload a malicious web shell to...

CVE-2021-23288

CVE-2021-23288 affects Eaton’s Intelligent Power Protector (IPP) software. The issue is caused by insufficient validation of input from certain resources, with risk of compromising the system when an attacker has access to the local subnet and can trigger administrator interaction. Affected softw...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase

Summary IBM HTTP Server IHS is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting IHS has been published in a security bulletin. CVE-2021-45960, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827,...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser by Google Inc. of the U.S. V8 is one of the open source JavaScript engines. Google Chrome suffers from a Security Feature Issue vulnerability that is caused due to incorrect implementation of the virtual keyboard in Google Chrome. A remote attacker could create a...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a Security Feature Issue vulnerability that is caused due to incorrect execution in full-screen mode in Google Chrome. A remote attacker could create a specially crafted web...

D-Link Multiple Routers Command Injection Vulnerability

Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise...

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...