CVE-2023-3377

Veribase (Veribilim Software) is affected by CVE-2023-3377 due to improper neutralization of special elements in SQL commands, enabling SQL Injection. Affected versions: through 20231123. Impact is described as high/critical (CONF, INTEG, AVAIL all high) with network-wide, no-auth, no-user intera...

CVE-2023-2889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0...

CVE-2023-2889

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0...

CVE-2023-2889 SQLi in Veon Computer's Service Tracking Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0...

CVE-2023-2889

The CVE-2023-2889 entry concerns Veon Computer Service Tracking Software with an SQL Injection due to improper neutralization of input. Affected: Veon Service Tracking Software prior to version 2.0 (and versions up to 20231122). Root cause: improper neutralization of special elements in SQL comma...

CVE-2023-2889: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0...

MAL-2023-8554 Malicious code in ory-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8555 Malicious code in otnet-ory-network-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a9ebfed32ec491b007a6c7e65f8ebae68d0acc3175b56442fa67e25fc916fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8553 Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8550 Malicious code in ory-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e67d3893cb4ea477e80d85d47524af218e6579c6e04ed4037580b05b45060d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d840202ac5d63ed914d72fb9165d5dacf64b5449aeca46d1fb168c12f7627160 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in one-host-page-title-management

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8562 Malicious code in one-host-page-title-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc83e2b70cb22321c16a33d9cc90936f0f9275da7342c5abeb2484717beea336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5274

Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service DoS condition on the function by sending specially crafted packets. However, the attacker would need to send the packets from within the same personal computer where the...

MAL-2023-8542 Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linktr.ee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99705723baa67b6d8e8af0802429709ea34477b6fc4e6e5d676244e7a042375c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8545 Malicious code in nintendo-of-europe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c974b5b6c49df853841d0c3fef7af9c28d6098c68985d09855aee2fe153d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in customer-journey-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611ae83fb22fa782fc27b23da9fb90fe5956c5e0008d94818de724f3c6b60c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8543 Malicious code in customer-journey-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611ae83fb22fa782fc27b23da9fb90fe5956c5e0008d94818de724f3c6b60c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nintendo-of-europe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c974b5b6c49df853841d0c3fef7af9c28d6098c68985d09855aee2fe153d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...