Malicious code in geocomponents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61de9020980b8adda40fa770a4e01271d679227030346f8daa0c47d8f33eabed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ul-mailru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ffb34853ca2aed2129272732bcaa389eb9243a502f86a14ddd4cd744d9827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

High-Severity Flaw Reported in Critical System Used by Oil and Gas Companies

Cybersecurity researchers have disclosed details of a new vulnerability in a system used across oil and gas organizations that could be exploited by an attacker to inject and execute arbitrary code. The high-severity issue, tracked as CVE-2022-0902 CVSS score: 8.1, is a path-traversal vulnerabili...

CVE-2022-3916

A flaw was found in the offlineaccess scope in Keycloak. This issue would affect users of shared computers more especially if cookies are not cleared, due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to...

Malicious code in tsp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc403d291cb9ff5ecda4c2c9388c3274698f50c9cc4982cad4ee8da7017d8c8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vulnerablbsusuendency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96fab10f3a2d9c02f0a1da42123c2b402cdbdedeb87fd648026da5709bfbdac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esperamier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc7733d93ad2076f2cfe0321184d75e654c34c12da38f238042fadf4277bfb84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in we-lib-login-tgp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f8e6e5c0168af0a89093c3d059ec1c5c00c6c2bdf595da95c57fa2175d1387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7084 Malicious code in web3-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test_1_59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 311825f483147ad29879b55012ea2616f3b737e71a06e21f07f33a1d0e89f494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spring-boot-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c0313226e487a37c9158c78bc620c0306eb778d0aa789677c0c77811785295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that originates from an attacker being able to deliver a maliciously crafted image to its component that processes ICC summary files to achieve memory...

Malicious code in discord-leveldb-dump (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55c25e70b31ec78486080577de7c7b2e78cde9b35d84eb84b869160ecb3af8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5670 Malicious code in react-redux-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1317918bed3a26481cc0f2581c7902fde3cb69f75efdf9ab9f4fc365d5abf451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/flow-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51ef940352ec2e2336f99764ff744f2303934f43534c72e57d768be83c6c240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/investigations-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fb466910cbd8f11eb9f83c1157f4f40e12cf74ff131ebec73f92b3ae0f962ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/content-admin-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88211a3606fb6d72dc9409ded383558925170c70c7f1175d893d399fbf12d88f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Privilege escalation

AsusSwitch.exe on ASUS personal computers running Windows sets weak file permissions, leading to local privilege escalation this also can be used to delete files within the system arbitrarily. This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0...

CVE-2022-36438

Summary: CVE-2022-36438 affects ASUS System Control Interface 3 (before 3.1.5.0) and AsusSwitch.exe (before 1.0.10.0) on Windows. The issue is weak file permissions in these components, which enables local privilege escalation and could allow arbitrary file deletion within the system. Root cause:...

Malicious code in darshanno1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed53ddb4a7d140a14e73dd1e70f0fca72e84826fd5c4675adfec2c75506b2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...