Vulnerability of performance optimization and security systems: Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs have a vulnerability related to unencrypted storage of critical information, allowing unauthorized access to protected data by attackers.

The vulnerability of performance optimization and security systems in Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...

Malicious code in mineflayer-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856c473f477bf211bd56c253bad6a030f48f0be8cbce95f721ad8fd74c98319a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-ainzfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d695d1fdd007ab16da46aac5cbde2e0bb0f1739b4468138f4f7278653df4bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 190b8c40ae199e301f0ec2e1364caac0d49271c7fd8cc7ea7192502f06e2945c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-sports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a36f3d3c020e8060abbc0f642934bed99c8594f79b7306030d885b0bd3a838d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thewise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff76ac61dc40170492d863adbe2a2217c038dcac28f37ea57bb2838a5d00bd96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-api2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9b51dc190a665e3875553fa564c55b34ab3ac98839656f3033486544d386449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db779bc3d95749d4bb288d33d42d6febc864b8ab1ce8b51b5ddba5cfac9298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devcenter-internal-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f2a9462d907363d8ee0b60751517a45053b2025cbb04e3d7e7b3001c306657 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-180 Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-248 Malicious code in devcenter-internal-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cc2065f221e57c6d1888edceccde992285946892dd890445b2f5cdab3002c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-596 Malicious code in milo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e0a528e7d78836123c80e70f5b1108807ae1c739ab8c65ad4a90702c07dab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in milo-cute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca097e4b102ba0c7c8c5489364e1ab73a771de2338769b2f99b7cc0d12d31ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-sumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5effa05b5d9a206eeb8b3ff81daa2287c6897c5e3d2df2aaf4d62932347a9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-dark-rulex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc65e0b0172e4250c22303c0778367df0d04b4256634ccb454dbff9bcd8415e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat landscape for industrial automation systems for H2 2022

Year 2022 in numbers Parameter | H1 2022 | H2 2022 | 2022 ---|---|---|--- Percentage of attacked ICS computers globally | 31.8% | 34.3% | 40.6% Main threat sources Internet | 16.5% | 19.9% | 24.0% Email clients | 7.0% | 6.4% | 7.9% Removable devices | 3.5% | 3.8% | 5.2% Network folders | 0.6% |...

Malicious code in web-ui-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a88ce42be3b23548e439e35c69b7b44620e8828e4c8f7ccc235bdbc8c4e26d7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owa-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11e49aab0abb7a01a703ccc6527f87fb4d48ccf2f542466b209e0bd4ca1b2da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

keycloak: Session takeover with OIDC offline refreshtokens

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...