Hardcoded credentials

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

CVE-2023-50948 IBM Storage Fusion HCI information disclosure

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

IBM Storage Fusion Security Vulnerability

IBM Storage Fusion is a fully integrated platform from International Business Machines IBM for running and maintaining all native Red Hat OpenShift applications. A security vulnerability exists in IBM Storage Fusion HCI versions 2.1.0 through 2.6.1, which stems from the system containing hard-cod...

Malicious code in dynatrace-oneagent-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b38a3f821fef1b8ddca507f11dff965bc5dddb2e2bd7d952c3b6b19103c69c10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-43 Malicious code in noblox.js-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7 The OpenSSF Package Analysis project identified 'noblox.js-servers' @ 4.15.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-39 Malicious code in raspeditor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7d1a65981576ae60116a65930e8a33501f196adc8903e31906ee0c19b9774c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raspeditor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7d1a65981576ae60116a65930e8a33501f196adc8903e31906ee0c19b9774c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @monokera/react-components-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf75e7663fbdb265190a8a2b33f0e6feb6e3d3cea6da8c936226cbe4c95f95c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-30 Malicious code in axelhowe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6b8a2beae8966a71fb077b1adaef5f5a2fdd01e92c2bdfed182d06a8745435 The OpenSSF Package Analysis project identified 'axelhowe' @ 0.0.0-5VtLmtixx6V5PkcW npm as malicious. It is considered malicious because: - The...

MAL-2024-22 Malicious code in stupidrara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3893054db7f136842c9eb85d9d6c2693ee9afa0f397ef3a30c14736aae381261 The OpenSSF Package Analysis project identified 'stupidrara' @ 0.0.0-jqNHd5ZlNt7p7qpN npm as malicious. It is considered malicious because: - Th...

Design/Logic Flaw

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...

Malicious code in chancets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf9c5ae637ce86f5dd9b811e29691dbc62866f58c76f517cd6d68f03e142a2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 39 : slurm (2023-9a74d212f8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9a74d212f8 advisory. - Update to 22.05.11 - Closes CVE-2023-49933 through CVE-2023-49938 Tenable has extracted the preceding description block directly from the Fedora...

Malicious code in new-pro-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-4 Malicious code in new-pro-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-3 Malicious code in hubl-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48b757cf4e86cc97abb28765fdf3f0a2205e99bbcf856ec3904b7e02038fea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8775 Malicious code in ngx-ndbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b85b4ba8a7146a1450ff0a1cc8b119bda90a838d67b93d8ad4f080551bfe002e The OpenSSF Package Analysis project identified 'ngx-ndbx' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

MQTT vs AMQP

The Initial Overview: Learning about MQTT & AMQP In the dynamic arenas of Internet of Things IoT" and cloud computing, communication protocols that are robust, reliable and capable of handling high traffic volumes have become essential. The two protocols that have recently gained significant grou...

Command injection

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201,...

MAL-2023-8760 Malicious code in chain00x_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...