Malicious code in express-blackbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f084bd8ff56a921dd19425589a261461fc8a6d922935dcdb49a5fd2a5ac0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2930 Malicious code in express-yandexuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e021736e7fa94fe326e11ab69e9a69f63fa749aabdf68f5848bde6132a3a99c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-yandexuid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e021736e7fa94fe326e11ab69e9a69f63fa749aabdf68f5848bde6132a3a99c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-checkout-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee64b0c73150a9bc88d72723046c6848958f503781788be03e8f8724c044ad24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2926 Malicious code in express-checkout-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee64b0c73150a9bc88d72723046c6848958f503781788be03e8f8724c044ad24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5242 Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-report-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a238f9ce326ef4fdbe1d22083d84c83f7d4f7bf14f0d383bf7e17e24e643f10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1547 Malicious code in bfx-report-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a238f9ce326ef4fdbe1d22083d84c83f7d4f7bf14f0d383bf7e17e24e643f10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1392 Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7074 Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34006

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

Remote code execution

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-34006

Titan FTP Server NextGen (pre-1.2.1050) is affected by a flaw in the installation of Microsoft SQL Express 2019 where the SQL instance runs as SYSTEM with BUILTIN\Users as sysadmin. This configuration can allow an unprivileged Windows user to execute commands locally as NT AUTHORITY\SYSTEM (NX-I6...

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen prior to version 1.2.1050, which stems from...