Remote Code Execution Backdoor

scoptrial is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists due to insufficient policy enforcement in the File System API component which allows an attacker to perform unauthorized actions...

CVE-2022-1746

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

Malleability remedied in Salt

Salt Project has fixed a vulnerability in Salt. A malicious person who has a locked user account can still perform actions under privileges of this account. Systems are vulnerable only when PAM authentication is used. Salt Project has released updates to fix the vulnerability fix in Salt 3002.9,...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/viewaction.php The vulnerability is caused by the lack of SQL data filter escapin...

PT-2022-22082 · Vmware +1 · Jenkins Vrealize Orchestrator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins vRealize Orchestrator Plugin versions 3.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to send an HTTP POST request to an attacker-specified URL. This issue enables attackers to perform...

MAL-2022-3786 Malicious code in ifit-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3640b578306c3bb5de0283dbd88f761d56113a06c994ebb1f8dc1ab5155b32f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in actions-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29b0da7106fb8e35f5515a5df4fc93af48e811fbcea479d55c874769abf0dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-835 Malicious code in actions-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29b0da7106fb8e35f5515a5df4fc93af48e811fbcea479d55c874769abf0dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1936 Malicious code in cloudfour.com-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4ed3228d8783e6d3824e3cb4a3d95001b651b3202d74cf74ab5c5780bfa2c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asana-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f108f052318bd4642d8d7a44a15b64b8cc196d82b0ef52cf2e6169d2814336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1128 Malicious code in asana-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f108f052318bd4642d8d7a44a15b64b8cc196d82b0ef52cf2e6169d2814336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1920 Malicious code in clever-goals-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ef7811241a80a34b41104fa6b735b5fba548a07d98a391da3d4aac2e1203fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5208 Malicious code in panther-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cf372dfd59de8690e3a89a7ea4f9117da1f269a50dcb3ac94d20a9f7903c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in panther-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cf372dfd59de8690e3a89a7ea4f9117da1f269a50dcb3ac94d20a9f7903c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-984 Malicious code in analytics-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e873030d572235f9222081b3b58b3b175774a8eb362a0f75e76f71e7be2cbea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in analytics-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e873030d572235f9222081b3b58b3b175774a8eb362a0f75e76f71e7be2cbea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...