The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain read access to data or modify data.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to read data or modify data through specially crafted HTTP requests...

[SECURITY] Fedora 36 Update: dotnet6.0-6.0.106-1.fc36

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Malicious Package

Overview ui-extensions-dev-console-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...

PT-2022-9785 · Sihas · Gcm-300 +2

Name of the Vulnerable Software and Affected Versions: SiHAS's SGW-300 affected versions not specified SiHAS's ACM-300 affected versions not specified SiHAS's GCM-300 affected versions not specified Description: The issue is related to the lack of account authentication and permission check logic...

nodejs: Prototype pollution via console.table properties

Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...

Malicious code in sfdc-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cc65f1247c1e38dd8ccfae3fc7b0383a22f730600ae940c91f9fba127a768e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6049 Malicious code in sfdc-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cc65f1247c1e38dd8ccfae3fc7b0383a22f730600ae940c91f9fba127a768e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2162 Malicious code in console-less-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece794298db615fecdf12771230e652484b7d626d61b19114cbc89431c3658a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in console-less-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece794298db615fecdf12771230e652484b7d626d61b19114cbc89431c3658a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6690 Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oci-console-navigation-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4c9be92eab6d265532fc1a1b3545d52a3a0ac6f9ec5920f200a480ee7e5fda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5012 Malicious code in oci-console-navigation-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4c9be92eab6d265532fc1a1b3545d52a3a0ac6f9ec5920f200a480ee7e5fda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in console-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75d691d1462f2b538ed7fbcbcf4a22b5dbf3fc4a4cd35a57250adb24889db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2163 Malicious code in console-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75d691d1462f2b538ed7fbcbcf4a22b5dbf3fc4a4cd35a57250adb24889db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-extensions-dev-console-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f16840f7273c569f73bfa9dbed041fcb7c6e26a8ae579a37e2a293da82a7aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cisco AppDynamics Controller Authorization Issues Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...

CVE-2022-31044 Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created...