Malicious code in obfuscation-detector2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcabc905756bb0ff739e32b0f597d3542ed346588adff156cad0db4d7a55ec62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63255cc7f08c677ca63aab0e06d6558460cff165f28f1bab1fae6cdcafe28ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in --legacy-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9016f41e70e542399b68b5d9e362563751dedbff976a3bd66808702c420f35f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-auth-library-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba35f5d5ad2abbe0f380ecedf252a58857f3f01eb94ccd979f4ebcb752adef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-travis-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 568970137987e9314235b38ecb7007db2b4db3023f6eaf1cacb92983e90f3613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chrome-ssh-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba428b9ebe2369390d5f53d0a930ddd41afab160b3f87a15471b2c4476d4c300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Command injection

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

Malicious code in brbsainath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88c8649206ee38eb37f336d21622267ccf1945436001cadbc0c11177aa1ce829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a622685c264e110942f1708664d382b725476825b60e352d6268d08c80e9785b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-16193 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0210 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: Authenticated command injecti...

Dell PowerScale OneFS Denial of Service Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A denial of service vulnerability exists in Dell PowerScale OneFS that originates from unprotected credential transfers. An attacker could exploit the vulnerabili...

Exploit for Improper Privilege Management in Ubports Ubuntu_Touch

UPDATE 09.09.2022 I got new CV...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

Design/Logic Flaw

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

PT-2022-22149 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.19 Dell PowerScale OneFS version 9.2.1.12 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3 Description: The issue concerns an unprotected transport of...

Malicious code in funtion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501077938fdff595541523797e68b1593506ab2dbebd6c2f4d34929227aef334 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-859 Malicious code in adj-ordinaryjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 662dabd6da05f3168c41092de41981e530666358e1ded1dcc044e69a58ac6f6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...