Malicious code in @polymarkets/clob-client-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e06fdabf4b8b56bb40b4656a1a254801f37bef08278111f59814e375be3e7dc package.json for @polymarkets/clob-client-v2 declares its inquirer dependency as an HTTPS tarball URL on registrynpmjs.to, a lookalike of the real np...

Malicious Package

Overview marginfi-client-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in ZendeskApi.Client.V2 (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Design/Logic Flaw

Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under "%APPDATA%\Securepoint SSL VPN" and add a external script file tha...

CVE-2021-35523

Securepoint SSL VPN Client (Windows) v2 before 2.0.32 is affected by an unsafe configuration handling vulnerability that allows local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged user can modify the OpenVPN configuration stored under %APPDATA%\Securepoint SSL VPN and add an exter...