CVE-2023-38344

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...

Arbitrary file deletion

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...

CVE-2023-38344

Affected software: Ivanti Endpoint Manager prior to 2022 SU4. Vulnerability: GetFileContents SOAP action in /landesk/managementsuite/core/core.secure/OsdScript.asmx allows reading arbitrary remote files when user-supplied paths aren’t properly restricted. Impact: authenticated attacker can read s...

CVE-2023-38344

An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...

MAL-2023-8185 Malicious code in agopoweryea123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5c5e5ef3f588541558976ee86112900b01f69ca9fe775b740d12315b8ddd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8182 Malicious code in team-atf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc4bc178a5c3fa44d9ed6dfa7c429692ad3bb5b15556ee5cfcf089935bc92d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8180 Malicious code in simple-team-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5da4b4631227adabb1a524dc451f3f7fce259d5c7c64d148e91f6edc74d4a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8173 Malicious code in fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bacf80ecaabd478055cb654ae5266e4b1d421e4de4fc9a563cdb1b2d94d449c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-VPJC-4JCV-JC29 NATS nats-server allows directory traversal via unintended path to a management action

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account...

NATS nats-server allows directory traversal via unintended path to a management action

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account...

Openupload Stable Code Issue Vulnerability

Openupload Stable is a web application. A security vulnerability exists in Openupload Stable version v.0.4.3, which originates from a file upload vulnerability in the file compress-inc.php. The vulnerability can be exploited to execute arbitrary code via the action parameter...

CVE-2022-28357

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account...

MAL-2023-8125 Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8131 Malicious code in fca-bucu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2908145aa0c6daa50e572b3120bf06a85fcc270fc0cdf0733af4bf1e624bf0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8147 Malicious code in nvthinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b205106bb201085c25d6e96124abcba44002344c6fe23341cbb164c753860ef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8140 Malicious code in hardhat-gas-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca926144035df7a8d332e6904ed879e15a43427f301b5b1849c40e2b82dfda07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8139 Malicious code in hardhat-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fe0a38eab92ae516ffa0abcd348cd662325f6e1cb7ecd957bb2918d5aa7350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8130 Malicious code in etheres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2233d7c65c25f473a3361254525a58f1182dfe5f8f3e9f0f4ac0dd68a43401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8127 Malicious code in eteres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f3da402b965cfedd565147e0db9b2f7d55656136aca4019d62ca23c6e30c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...