MAL-2022-2309 Malicious code in d3isellction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b9a907b8021128b9ca40ad898622e9c7b6130ab3196e752f8e9bb309743463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1931 Malicious code in clispmner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da6cbc1deeb9e8625bfa8359622f41cc2c72dc3abffedda4d8bc7dbdcf32c2ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6837 Malicious code in usaa-dls-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcc1ba2931e747b56e50e4acd7a8f7b19a8e670c5d73f5aff6eef5bc0a3803f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intel® Team Blue App Advisory

Summary: A potential security vulnerability in the Intel® Team Blue mobile application may allow information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Team Blue mobile application. Vulnerabili...

Vulnerabilities fixed in Scooter Software Beyond Compare

Vulnerabilities have been fixed in Scooter Software Beyond Compare. The vulnerabilities allow a malicious person to execute arbitrary execute arbitrary code under the SYSTEM user's privileges and the obtain elevated user privileges. For the vulnerability with attribute CVE-2022-36414, it is only...

GHSA-C2PJ-RR68-PW94 Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

CVE-2022-34112 describes an access-control flaw in DataEase v1.11.1 where non-admin users can arbitrarily uninstall the plugin via /api/plugin/uninstall. The issue’s root cause is improper permission checks on the uninstall endpoint, enabling privilege escalation to perform a destructive action. ...

MAL-2022-6069 Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2016-15003

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

MAL-2022-6876 Malicious code in uwjoekgxmlhrzsaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac06c49790c6f96aec2422e7a1e58701a7e6b891c3bbe38d1781a19247431cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5818 Malicious code in rkyinqawlpfdgbvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca993faa0632021bfc7c22772f18ebcb90d7e7632c5d1ec71fa41905e0a74528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

MAL-2022-6465 Malicious code in test-aaa-yyyy-zzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82a8db0c5e785c986ea5b9583db6e09eba775fdd750a344cedfb5982bc3fb3ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

NoMachine 安全漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...