21 matches found
Malicious code in mdp-client-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bae22cc58ac4c2a2b449514ef62c82fde3dd2d6d0d5697b3689f16c8583e62b The package mdp-client-web was found to contain malicious code. Source: ghsa-malware 070c26f2080c516dd8c197674dcc76a911d4dfb62242027e1d50a04c4536f0b2...
Malicious code in customer-center (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b07f04df811b9a1153761f420a42baae02589eb630664403d8be7ce774481d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cbridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blackhoole (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053be340ed4870f8e3c020233081738483eb3cc49f35efc12152b49e931cfd18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in updated-script-50-50-pick-a-door-script-rooms-check-vr6en2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac1bc9fbd4f7c9635108ea3cac255349528e74daacde9997d945a284f644c80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @zitterorg/hic-dicta (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe087aad19fb7a55dc2445a6923b9644bbb9f2e3ae26710c7a5e79d9cae5bdde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in enviso-web-components-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d75a7c878177290aa6c8c20615f8d9c791e5461f2f344511808c3ccc48e63da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Vordel Gateway 6.0.3 - Directory Traversal
Vordel Gateway 6.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/47975/info Vordel Gateway is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory-traversa...
Vordel Gateway 6.0.3 - Directory Traversal
source: https://www.securityfocus.com/bid/47975/info Vordel Gateway is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory-traversal strings such as '../' to gain access to...
Satel Lite - Satellite.php Local File Inclusion
Satel Lite - Satellite.php Local File Inclusion source: https://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information...
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution source: https://www.securityfocus.com/bid/23008/info PhpStats is prone to a remote code-execution vulnerability because the application fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary PHP...
HP JetDirect FTP Print Server - 'RERT' Denial of Service
source: https://www.securityfocus.com/bid/23168/info HP JetDirect FTP Print Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue on an affected computer to deny service to legitimate users. FTP Print Server 2.4 and prior versions are vulnerable. python...
Outpost Firewall PRO 4.0 - Local Privilege Escalation
Outpost Firewall PRO 4.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation...
Outpost Firewall PRO 4.0 - Local Privilege Escalation
source: https://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation directory. A local attacker can exploit this issue to...
Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation
Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level...
Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access
source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...
Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access
Walla TeleSite 3.0 - ts.exe?tsurl Arbitrary Article Access source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and...
Walla TeleSite 3.0 - ts.cgi File Existence Enumeration
Walla TeleSite 3.0 - ts.cgi File Existence Enumeration source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path...
Walla TeleSite 3.0 - ts.exe?sug Cross-Site Scripting
Walla TeleSite 3.0 - ts.exe?sug Cross-Site Scripting source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path...
Walla TeleSite 3.0 - 'ts.exe?sug' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosure, file enumeration, SQL injection, and...