PT-2022-16193 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0210 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: Authenticated command injecti...

Exploit for Improper Privilege Management in Ubports Ubuntu_Touch

UPDATE 09.09.2022 I got new CV...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

Design/Logic Flaw

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

PT-2022-22149 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.19 Dell PowerScale OneFS version 9.2.1.12 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3 Description: The issue concerns an unprotected transport of...

Malicious code in funtion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501077938fdff595541523797e68b1593506ab2dbebd6c2f4d34929227aef334 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-859 Malicious code in adj-ordinaryjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 662dabd6da05f3168c41092de41981e530666358e1ded1dcc044e69a58ac6f6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-solid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65f31f2a845162d09304994526f18185ac76fcb1523ca16708bd87d6a1ce19b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in getmeurl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be89eb493fb9124196b244a46451068a574ca1269ffae4f4234f6fffe4939e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apiiitrueid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc3c255dfb4f95180eedfe593a9e58016cc8cda601b8bbbf2d48f01e61e0f8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bep20_trans_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed1e47d5e71f45b9bd5cce7551d7eb20278b14cb06572ff3e53b5c9c2a94225 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xpostcss-loadsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7b25fd3ba45c53cf0e0120c9ca6bb1bd8b9f3ef554a6d2d5341d09e13f3ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8339b1fbb18c90dd4815e0ad2ee40691c9eb1a801b8e50d2940eaa58c43238d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xlj2s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ecc783d77eb1d398f87436c7d6f9b29f80e32532c5023ac1c9ae7e8191821b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in utia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a67fb1aae628b9261e13184946433947c840a938a8fa590bb91892703e678b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xc4hrat.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9970c7d95784a693f19c3602b864ce7978094c775e8c21ab01a11a62cd34f529 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duplex-child-rocess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3ec325a6dc92f083b06d506e89526c20430b1740c4af5e7d3df470e48c455f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44c504d9afb10c1aaa42c206703ee6cf7fbe4fb16ff2f2a05e8f3327698b35df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...