CVE-2022-45138 WAGO: Missing Authentication for Critical Function

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

Malicious code in discord.js-hakai-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a908f033e96eb0d899327ba365b5e97d307772f0f8f2daa21c5edd0076b0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

K35414143: AMNESIA:33 vulnerability

Security Advisory Description AMNESIA:33 is a set of 33 vulnerabilities that impact four open source TCP/IP stacks uIP, FNET, picoTCP and Nut/Net, which collectively serve as the foundational components of millions of connected devices worldwide. These vulnerabilities primarily cause memory...

SUSE CVE-2017-0564

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

Malicious code in @gumtree/ui-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f495166781b53d4692646ceae552716afa0c80fbc51ff32f0dd98df0fc8081d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solc-0.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb2ef4de1156c7094d66ff9e85b4e9b17b04b11eb2348040a1f7c8756c7b0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tohe-doc-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a9a9c63d20d34ca8cd59f2c43090e89223718888b73e20c38ba84477ee6d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-file-match (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416239cd07c736ee9cda1661d413016b66a35ccd99054f13c8fb5b81fefa02dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdb-geobase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcae6376270cf9586731727aed3a60ef10126ec0fa41a3c3ec04da7169fef7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bemhint.i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4e130fb09e09d1da9ad485faf4462192e33d53a433d5afbc8c76975e1d3b84b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Schneider Electric EcoStruxure Cybersecurity Admin Expert 信任管理问题漏洞

Schneider Electric EcoStruxure Cybersecurity Admin Expert Schneider Electric EcoStruxure CAE is a cybersecurity administration expert from Schneider Electric France. Versions of Schneider Electric EcoStruxure Cybersecurity Admin Expert CAE prior to version 2.2 have a trust management issue...

Malicious code in create-or-update-comment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 529afddb0ce1c2ffee5a4ae20c89657596df9fb27440956e1f78e8f6b80cb67c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cu-dashboard-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a7db61863c75c4e403ac8634e0889a3980b57447fb6c65a10f21724a064fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rdi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20c03ef068f0a97e359f9541cdc83af91b639b9c235553b4b1e0ed9ce502f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chrome-extension-message-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422f9abdd9d35628def10118ea6412b99c816f1ec94c49b3596d5fb8feef5d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in portal-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274c5bf1b8b6d50340a45e5b6b5fc38ce8f38f3d1c1138d90dca4aa0d1e26ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sponsor-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eg-auth-ui-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437e53aa9aa9cbd8bae160de3b5b28fa886c8552f617e61fbe93c938c4e2029c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yf_hello_world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7d00e59d8e35322a71178ba2e7d8ad7b245515fee015d99f8d7c4ec5a7d354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in --hiljson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346600b3c428f935cffe333f73dbf2bd10ff54fce19d9349db9de380ddc45de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...