Malicious code in hreport-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a33613a96a4780a468b53485091475312eb17c0a6c883d4dd09eacfcfc995834 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crcloud-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2872c6473427534afbbcbe64c7af6c4d0ec7259992ce2122f13e14a6e6f20c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fixed-sidebar-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a886a2b249fe5866154125cdc1f0b7eca75a596ae19cc5b57d215b5eda4cb21d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-disclosure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc8ed92b0d19f6d8082cc449fa37e01fb55a55f8391167d18189353b85b9f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions Vulnerability

Exploit Title: Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions Privilege Escalation Exploit Author: Carlo Di Dato for Deloitte Risk Advisory Italia Vendor Homepage: https://www.inosoft.com/ Version: Up to 2022-2.1 Runtime RT7.3 RC3 20221209.5 Tested on: Windows CVE: CVE-2023-31468 Inoso...

PT-2023-20359 · Danfoss · Ak-Sm800A +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface, potentially leading to a full system compromis...

Malicious code in 1ds-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc8c09b58037e1261454fe703ffc7c5929254eb97c02e35c1b5d495061d192df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ynf-core-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 448630b3766e8205c4a13bc9ba0261d3683efc228644c118134e4262037c3219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ynf-dx-webpack-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff33ef0f3340901bb0ce287a8b87f098654546d5b5883805533e7581670f64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Controller: Html injection in custom login info

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise...

Malicious code in noblox.js-ssh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d256313b540a1d57c4e1113c411f1a40210f65c3737a5f68ea3b324e23b054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-eth-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12be8620708021936234e789248dd4ad0826cef81ef02171285815f476fb742 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-providers-ipc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45dd480c31cdb6a16b4c7308f724f05b190296dae7805a05b87ae74a81440fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 561512a85b3d35e7036182a3e45710bc0168b57644ed6fc0b4483443649d544c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c4e88528a7231605ac5b8ffbae0eb705d1b7cbd05d44bc72f4d26f6b7db7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code Injection

net.bramp.ffmpeg:ffmpeg is vulnerable to Code Injection. An FFmpeg object can be created using the constructor in FFmpeg.java, but it does not validate the ffmpeg executable path, which allow an attacker to execute malicious code on the system...

Malicious code in vue-router-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d2eb48e80ee684a1f36a9d44f562d8f86ed9df08286f57fdee187de71bf7010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Pre-Auth SQLi leading to RCE in Social Media Skeleton v1.0

Summary A SQL Injection vulnerability exists in Social Media Skeleton v1.0 via the username and password parameters in admin/login.php. Not to be confused with login.php, which properly escapes special characters. Issue Description SQL injection SQLi is a code injection technique used to attack...

Malicious code in eslint-config-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a0feb02dac8e9a44d4dfef753d5e64e20660b0f07333ca0660f422036d468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...