EUVD-2021-19679

Malware in sbrugna...

EUVD-2022-31714

Malicious code in bioql PyPI...

MAL-2025-47143 Malicious code in @ctrl/transmission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 373adf918ca34b44f43aa8ac4605a9ea8700867194e71bbbeef53aad48b3b593 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Device Mode Transition Detected (Medium)

The state of the controller code changed, regardless of the state expected by the process. When not part of scheduled maintenance, forcing can be used to introduce hard-to-detect, long-lasting changes that are harmful to operations. This plugin only works with Tenable.ot. Please visit...

Controller Code Upload Detected (High)

An upload of the controller code has been detected over the network. When not part of regular operations, a code upload can be used to gather information about the controller behavior as part of reconnaissance activity. This plugin only works with Tenable.ot. Please visit...

CVE-2021-32958 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

Successful exploitation of this vulnerability on Claroty Secure Remote Access SRA Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface UI. With acces...

Design/Logic Flaw

Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID...