Vulnerabilities fixed in Scooter Software Beyond Compare

Vulnerabilities have been fixed in Scooter Software Beyond Compare. The vulnerabilities allow a malicious person to execute arbitrary execute arbitrary code under the SYSTEM user's privileges and the obtain elevated user privileges. For the vulnerability with attribute CVE-2022-36414, it is only...

GHSA-C2PJ-RR68-PW94 Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

CVE-2022-34112

CVE-2022-34112 describes an access-control flaw in DataEase v1.11.1 where non-admin users can arbitrarily uninstall the plugin via /api/plugin/uninstall. The issue’s root cause is improper permission checks on the uninstall endpoint, enabling privilege escalation to perform a destructive action. ...

MAL-2022-6069 Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2016-15003

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiate...

MAL-2022-6876 Malicious code in uwjoekgxmlhrzsaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac06c49790c6f96aec2422e7a1e58701a7e6b891c3bbe38d1781a19247431cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5818 Malicious code in rkyinqawlpfdgbvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca993faa0632021bfc7c22772f18ebcb90d7e7632c5d1ec71fa41905e0a74528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

MAL-2022-6465 Malicious code in test-aaa-yyyy-zzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82a8db0c5e785c986ea5b9583db6e09eba775fdd750a344cedfb5982bc3fb3ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

PT-2022-6521 · Nomachine · Nomachine

Name of the Vulnerable Software and Affected Versions: NoMachine version 7.9.2 Description: The issue is related to incorrect permissions for the folder C:ProgramDataNoMachinevaruninstall of NoMachine, which allows attackers to perform a DLL hijacking attack and execute arbitrary code. This is du...

NoMachine 安全漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...

Malicious code in loblaws-product-listing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be1c1dd93a3ca3282807ab09a46dd0e2b293324d18f46763bfef24eeb65260d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wak-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21db5bed3d8d343ad7c9205646eb13bee74a23f45c703b873c797b7a2722f45e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5579 Malicious code in ramp-network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dee9ba72be5809531f9de94a5e860446175b21a688347d12bfe9fb1db3aa4455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...