MAL-2023-1046 Malicious code in json2stringfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e42c4a993125bac35486d178cd7356e08471fc96b79862efed3c64ae4f1d7d6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in json2double (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 771b498cebd7036954c92bfa43feba6b8fd756aed6cb29bff183be0b196beaa7 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1045 Malicious code in json2double (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 771b498cebd7036954c92bfa43feba6b8fd756aed6cb29bff183be0b196beaa7 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-975 Malicious code in xml2yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ede33f285ce592232ffffd5ea89eb8505d88e0d520640d52c721560d06d02f69 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1557 Malicious code in jsontostream (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8cf6eca7a81571a14b52b17b7b9bfe99f347e67564d0dd421276aac3552ac297 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in xml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 300b6b99945570abba14ecb42252e42d3914c415c3948eba8646ce2c18417b60 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1556 Malicious code in jsontobinary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 31cd4cd413663a1b31485b3f8d93d643b462e9331b416f3aec9e6f0bde0aa8c2 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in jsontobinary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 31cd4cd413663a1b31485b3f8d93d643b462e9331b416f3aec9e6f0bde0aa8c2 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in xml2binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8d6e59c6cb9fb2059b390b3b3677b1be1d9eedbe9f78b8ffa2794d5483e2d6d4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

CVE-2023-31163

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31161

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 f...

CVE-2023-31164

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31165

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31166

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See...

CVE-2023-31160

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31156

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31155

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31157

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31150

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details...

CVE-2023-31152

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details...