ROS-2-1203

2.1203 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command execution vulnerability exists in the Milesight UR32L urvpnclient cmdnameaction function, which can be exploited by an attacker to execute arbitrary commands on the system...

ROS-2-2028

2.2028 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

Command injection

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to full...

Malicious code in carbon-sageone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dd56dd7300d3e57844b0cda4d9223dc1874d2e0db91e2308fd11ff2ac5a2d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-824 Malicious code in sword123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6873abc1d5ac185b0cd7f13b940e3144dd46f0fddd5608e317c041de653e8bde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-3484 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary...

Malicious code in wix-commerce-ticketing-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Command injection

An unauthorized access vulnerability has been discovered in ROS2 Foxy Fitzroy versions where ROSVERSION is 2 and ROSPYTHONVERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could...

CloudExplorer Lite 安全漏洞

CloudExplorer Lite is CloudExplorer's platform that provides out-of-the-box cloud hosting management, cloud billing, operational analytics, and security compliance, among other essential features, along with powerful extensibility to meet the customization needs of enterprises. A security...

The vulnerability of the parse_required_member() function in the protobuf-c data serialization protocol, related to integer overflow, allows a attacker to execute arbitrary code and completely compromise the system.

The vulnerability of the parserequiredmember function in the protobuf-c data serialization protocol is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and cause the system to be completely compromised...

CVE-2023-28287 Microsoft Publisher Remote Code Execution Vulnerability

...

Malicious code in vue-gws (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 557d3dde7707f6cebfde77623067da836191b95969867f4855b6706e5a027e56 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in grabathon-4.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f79f14ebf843fdb684a6c8fb1c92c4bd5f60701a7fc98c0b95584b249a8438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-radio-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83481051c5331447023a047dfc4f6f747cf968f9cbe6c214bd3baa3aa57c0348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799f38ee085f9c2d790bf9c9e78379f22e3ad2e3de94ff31011bec69ee78196d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ffca641672539520dd6ae1301f0c09f9fd69d642335c83b5db13bdf7240961 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-transactions-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4aa758a82c1ef95eb8cec01a5206c1000e9ae259eab65eac788bb629690c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-text-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77cf260f432244dc8401fd56c9cf495d88b68182872ddc07d47825a16220276 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...