20945 matches found
MAL-2024-10300 Malicious code in allocations-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2043c21b9a8ddcf7961abb0f633a777981430b94043ebf735afb392ad92c84b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-8934
Beckhoff TwinCAT Package Manager is affected by a local command injection vulnerability. A local user with administrative rights can enter specially crafted values in the UI to cause arbitrary OS commands to execute. The vulnerability is associated with TwinCAT Package Manager versions prior to 1...
CVE-2024-8934 Beckhoff: Local command injection via TwinCAT Package Manager
A local user with administrative access rights can enter specialy crafted values for settings at the user interface UI of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed...
Malicious code in blossom-flex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10298 Malicious code in blossom-flex-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...
PT-2024-7561 Ā· Beckhoff Ā· Twincat Package Manager
Name of the Vulnerable Software and Affected Versions: TwinCAT Package Manager affected versions not specified Description: A local user with administrative access rights can enter specially crafted values for settings at the user interface UI of the TwinCAT Package Manager, which can cause...
MAL-2024-10282 Malicious code in ui-tooltip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ec8e71cd55c69aa20854cfdc8a408f5591d35551b0d09cfa0bbdd9f148a7401 The OpenSSF Package Analysis project identified 'ui-tooltip' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in ui-tooltip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ec8e71cd55c69aa20854cfdc8a408f5591d35551b0d09cfa0bbdd9f148a7401 The OpenSSF Package Analysis project identified 'ui-tooltip' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...
CVE-2024-41153
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...
CVE-2024-41153
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...
CVE-2024-41153
Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the wri...
CVE-2024-41153
CVE-2024-41153 : Command injection vulnerability in the Edge Computing UI of Hitachi Energy TRO600 series radios. The issue allows an attacker with write access to the web UI to execute arbitrary system commands on the device with root privileges, giving attacker control beyond the write privileg...
Malicious code in custom-ui-extension-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10259 Malicious code in custom-ui-extension-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
KLA74631 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, cause denial of service, perform cross-site scripting attack, gain privileges, execute arbitrary code. Below is a complete list of...
KLA74642 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, cause denial of service, perform cross-site scripting attack, gain privileges, execute arbitrary code. Below is a complete list of...
The vulnerability of the jQuery UI JavaScript library, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.
The vulnerability of the jQuery UI JavaScript library is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow attackers to execute cross-site scripting attacks...
Improper Input Validation
Nginx UI is vulnerable to Improper Input Validation. The vulnerability is due to improper input validation when configuring logrotate, where unverified input is directly passed to exec.Command, allowing arbitrary command execution...
[SECURITY] Fedora 41 Update: podman-tui-1.2.3-1.fc41
podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
Directory Traversal
Nginx UI is vulnerable to Directory Traversal. The vulnerability is due to a controllable log path which, when combined with directory traversal at /api/configs, allows reading of directories and file contents on the server...