CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...

Malicious code in n-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3eea908e1ac1801f4b2bfda0ee3333942a9af0f46e5f4e2b41de2a2b8d9b66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eeddffrrvvrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc057d5c15cbb841971a77ec214defaaa36bdd16dccbba8fdd162bcc41e26b6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz-fb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f4752df8304622adf069f9684bf8006f25e596ce72432257c6a779453f7f008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple Releases Security Updates for iOS and macOS

Apple has released security updates to address a vulnerability in multiple products. A cyber threat actor could exploit this vulnerability to take control of an affected device. CISA encourages users and administrators to review the following advisories and apply the necessary updates. iOS 15.7.9...

CVE-2023-36669

Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit IDU before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit TPU within the IDU by sending crafte...

MAL-2023-347 Malicious code in fc-fatca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737a20c9f6dbe7f64964338a685eb15657c970610dcec176f17c6340af3c6f12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tropine_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fd7c56c8bc0e04e729a9750b589a46dae70cc5c7a6196c635cdc8bfa6e3ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fdcbf7a838d1ab8733a1da6605dfb92935f0b70f7feaf91b79aba1fa85b685f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-43396 Apache Kylin: Command injection by Useless configuration

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf...

Malicious code in we-lib-login-tgp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f8e6e5c0168af0a89093c3d059ec1c5c00c6c2bdf595da95c57fa2175d1387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maven-compiler-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 314e6207e1eff2d0ffa8de2edb81458a38f4cb93c6326291fe91105e46f67adf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-23768

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device...

Malicious code in node-bbael (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4bdfc3732b42df7d3a8448bb29c067e074a942d894a7ec2193a07c20710058f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in t4peork3m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389a8687510f188bd75a1a0b13e1af025000d18a474416b347c4ed7da26792e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in r2act (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 666edae682afb251329ec39465aabdd8af84df52f5db6718723db0c65fc3b429 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rebact-eror-oveflay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9795bcc7176fa0e444a6797369319835e1f3015d8162a0671a902348c24341c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in -gzip-ize (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a0dd1ae21dc3f5787d43924a3612a418e301478780e539aac0bdca13877cb12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...