CVE-2022-31806

CVE-2022-31806 affects CODESYS V2 PLCWinNT and Runtime Toolkit 32-bit, prior to version V2.4.7.57, due to insecure/default password protection not enabled and no prompt to enable at login when no password exists. Public sources (CISA ICS advisory ICSA-25-329-05) describe potential consequences as...

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 PLCWinNT and Runtime Toolkit 32 versions prior to V2.4.7.57, which stems from the fact that password protection is not enabled by default and there is no message or...

PT-2022-20946 · 3S Smart Software Solutions · Codesys V2 Plcwinnt +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 PLCWinNT and Runtime Toolkit 32 versions prior to V2.4.7.57 Description: The issue concerns password protection not being enabled by default. In cases where no password is set at the controller, there is no information or prompt to...

watools 安全漏洞

watools is the Water Accounting plus WA+ toolkit. A security vulnerability exists in watools. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

CVE-2022-31806

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller...

Malicious Package

Overview mano-toolkit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

OFFIS DCMTK 路径遍历漏洞

OFFIS DCMTK is a collection of libraries and applications from OFFIS Germany that implement most of the DICOM standards. Software for examining, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

WordPress Multi-page Toolkit plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Multi-page Toolkit plugin 2.6 and earlier versions are vulnerable to cross-site request forgery,...

Malicious code in jive-styling-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a59989394c92f8fba37cb005d3969162434ceead403efd05bcb866970e799795 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4034 Malicious code in jive-styling-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a59989394c92f8fba37cb005d3969162434ceead403efd05bcb866970e799795 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6608 Malicious code in toolkit-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70ec844ffde7f5eed971ac3bba674796cbeb8c110431c573e0ae1cadf70f96bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolkit-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70ec844ffde7f5eed971ac3bba674796cbeb8c110431c573e0ae1cadf70f96bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-816 Malicious code in ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cafbe8978f178ead2812d3adb9c55bd5e038635bfb64b44571802997f98b1f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cafbe8978f178ead2812d3adb9c55bd5e038635bfb64b44571802997f98b1f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.microsoft.mixedreality.toolkit.foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263c060bfc159c6ec15abeaea9e25a0ff51e0cae3c061ff742788722cf44e3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2044 Malicious code in com.microsoft.mixedreality.toolkit.tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010387da024ddb830436616463c0c0210bd24c8cbf1b4345f4e22e63d460806b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opera-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfbe56e00b1f2b6404e53195a433e8101e6ae15d77addab0dfad7ce3414b2ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5104 Malicious code in opera-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfbe56e00b1f2b6404e53195a433e8101e6ae15d77addab0dfad7ce3414b2ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4459 Malicious code in mailru-toolkit-lego-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad7f34dc30e8c7b2d7ac5ce792161ffaa94305473c6cbfc016f30ff1d89916b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...