CVE-2022-0902 ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in flow computer and remote controller products of ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC...

CVE-2022-0902

CVE-2022-0902 affects ABB Totalflow flow computers and remote controllers (RMC-100 Standard/LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC). The issue combines path traversal and command-injection vulnerabilities in the proprietary Totalflow TCP protocol, allowing a remote attacker to insert and run arbitr...

Malicious code in totally-legit-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7beb17014129818ff75cbfeca6fea9bfe8da06e852f3631a1d110035de7c6317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6940 Malicious code in virtru-typography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76d296612ed6a798d82655b80032df811ba56f71cc56a47b5489f89ebf69daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dep-conf-my (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2960498bfa67e98a3989cbd03788d73c13cc5c55d9d7a5cca5b9b9569b926673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-838 Malicious code in activity-iframe-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f7b42aa01fdd5c7d433b8266287d4d592293312d50730555fc6410cf8e1cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3850 Malicious code in insomnia-plugin-simple-hmac-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82257b4c71933f16336920865f08941bf1fd250ffd06dd3e34a99e3319b78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1042 Malicious code in api-routes-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa098cf98014efb5822c9283caad8c78740b5592ec51aad691cb5e225282bf59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5209 Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-535 Malicious code in @proto-services/banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287c482c1bc2e6beee2f3c527f4fa2333ff7e8c00800919fe40fa31ed2d3eda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-536 Malicious code in @proto-services/integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781f9096c26b10d421c4f8763732e2a62d6a4347fd0122fb2c8935dc00b3ea81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5843 Malicious code in rondo-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c834b76d7f6c4c27ff4b6eddb1526e4bbdf0776789432acdb0f8c715fd2cabb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-259 Malicious code in @exnessimus/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce3949c509aecf530ab224e6627260a41b8cc0ff59edc392f8820a7dfd36bf0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-502 Malicious code in @pingone/net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b034c29b3becd2d3619e28b984139f85ed7d62e1ab8fd2d0eeb30d54571102a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7007 Malicious code in vulnerable-vkom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfa422ddf85fbbbb0ecfcffc0325e18e608403b67a3a42906b0ff18277f27219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chargebyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed65441cd1913d7f798d871b705b9503e05f04e1653a5d1c5537130ca9825664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1880 Malicious code in chargebyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed65441cd1913d7f798d871b705b9503e05f04e1653a5d1c5537130ca9825664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3771 Malicious code in identity-partners-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b00cf88849677ae50190aafc5a69640c57d219bcce9ff4703adc5c42c80c614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3769 Malicious code in identity-dev-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375e8519f221cf31732a3293866f4b54b93edb90ba7179ffca4d4944343e9850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...