Malware in fca-horizon-remaster

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

1Panel is an open source Linux server operation and maintenance management panel. An OS command injection vulnerability exists in 1Panel firewall functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger...

Malware in sync-https-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in price-record

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in firefly-shared-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 540259a2eb130bcb8b4596b7a6458b6290bd5dd6b8846751f0475931083f7594 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in n-messaging-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a7dbe95def0d204c9533eba028f108451dd6ce16866266114b1cf2cd1cfb4c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in presto-webui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc84a4fe2d659dd1d6ab8f160c0c7c4a5f1920b754c9be7cccae485027e209e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redox-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79098325aa80c4b943aebc29d3857ca921d555eda9dbab3ac40c4388c132ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in foxy.io-serverless-functions-on-netlify-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31fcc1352ebaac1135e5fad045763c61fc9666c1968dbd91fe87951dd50882ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailmason (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4dd298cf40c979a5f0e097d16f3d9b65375a8228e45e4d2bb4ffe7b327f48e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelov2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 730aafb848eae5cd60a92a1ea9c347a0d8943224bb472952511c4ad6ebb3ef43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-jelo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2baa7413e9468acd20ce003a6b7caa412c7a2e6cd7d941702add8ac4dcd0bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-yukihira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570d6a44c1fdd0147a33b4f6d656e16f85034cd01f025749ecbbc0ebda2c03cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @leesiwoo/fca-horizon-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8dec25cc111a5b3b0146bc3b1436ce0a77fed1c784460a1be82ace48ed2ab4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP NetWeaver Path Traversal Vulnerability (CNVD-2023-65181)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A path traversal vulnerability exists in SAP NetWeaver, which results from the program failing to properl...

MAL-2023-559 Malicious code in kteam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 855f8da840b51f09382b8e45d6a5b94dbbf7b833931b0d173d719ea2c8277741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-33989

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

Directory traversal

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

CVE-2023-33989 Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)

An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...

CVE-2023-33989

CVE-2023-33989 concerns SAP NetWeaver BI CONT ADD ON (versions 707, 737, 747, 757) with a directory traversal flaw that can overwrite system files. The root cause is improper path filtering, allowing an attacker with non-administrative authorizations (network access) to target OS files and potent...