Malicious code in sentrybrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d612638266f3e357a904ecb6eb51c3d2579e19d19916e47b18615e802b311f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-30633

An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers PCRs to record information about device and software configuration to ensure that the boot...

Oracle Communications Security Vulnerability

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. A security vulnerability exists in Oracle Communications' Oracle Enterprise Session Border...

Malicious code in @bitsoex/react-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e89332fc8c2abca1b7c5a14da73534cf2f08bbedb6a61665dd691b87893e008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agen-sbobet-judi-bola-online-terpercaya-paling-lengkap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a4f992569321418e44d0198225fca97602cc4663908efad4fc4772d1ef27ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fas_elbridge_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eeb55ec40cca8a30b5ca2b20ede9234fa59a23da2fa5cef2ad9c3e461eba4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the communication protocol implementation for microprogrammed router software ER2000, related to stack buffer overflows, allows a hacker to gain control over the device.

The vulnerability of the communication protocol implementation for microprogrammed router software ER2000 is related to stack buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain control over the device...

CVE-2023-4817

This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device...

Design/Logic Flaw

This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device...

CVE-2023-4817

CVE-2023-4817 relates to an unrestricted file upload vulnerability in the ICP DAS ET-7060 data collector. The issue allows an authenticated attacker to bypass upload restrictions and place malicious files on the device, potentially compromising the entire unit. The vulnerability is described cons...

PT-2023-30714 · Icpdas · Et-7060 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire...

Cisco IOS Buffer Error Vulnerability

Cisco IOS is a suite of operating systems developed by Cisco for its network devices. A security vulnerability exists in the Cisco IOS software and Cisco IOS XE, which stems from a vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature that could allow an authenticated, remote...

Malicious code in gradient-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7856f4d5db8c9074c3633d2d5a61782c18536a58a84cb8ad56ae029525880875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chat-api-asuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f583cda7182f56d351d1ce81779546a87791f7686b5acf9ae3d1e80250e9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-get (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e0a51fdb1bf06bf1cf80981823698ed77398aeef31127fbab3fcfb0a3f2e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-4291

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...

Duplicate Advisory: EVE Doesn't Measure Config Partition From 2 Fronts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-phcg-h58r-gmcq. This link is maintained to preserve external references. Original Description PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in comm...

CVE-2023-43630 Config Partition Not Measured From 2 Fronts

PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of the config partition not being measured correctly. Also, the “vault” key is...

Malicious code in symphony-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1360bb9cfdd8afaf47d9444561048cc1f780fc6dd830a6d709320dc260bf7476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in team-atf-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dbd02e3dfb7a6582ce683aed8cb3cf5be7a1a449fe0ac5ce208d87034938dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...