6 matches found
MAL-2026-10718 Malicious code in @sciagent/cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310123a94891174b8cfa55def38b6e916b89d43306a52793739f26289fe51e4d scripts/postinstall.js fetches a 10MB+ 'sciagent' executable over HTTPS from https://u250924-adc6-f977430f.westb.seetacloud.com:8443 a rented...
Malicious code in lyrox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a758a1be229d0656a639cd9e76cb14b3224260a08da87b6de28ff2bc4c1d48ba Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded,...
The vulnerability of the installation file of the Kaspersky Endpoint Security antivirus software and the Kavremover utility allows a malicious actor to execute an external executable file from within the installation process.
The vulnerability of the installation file of Kaspersky Endpoint Security and the Kavremover utility is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a malicious actor to execute an external executable file from within the installation process...
CVE-2021-20443
IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality such as a library from a source that is outside of the intended control sphere. IBM X-Force ID: 196619...
Symantec VIP Access for Desktop DLL Load Native Code Execution Vulnerability
Symantec VIP Access for Desktop is a suite of online account security protection software from Symantec Symantec. A security vulnerability exists in versions of Symantec VIP Access for Desktop prior to 2.2.4. An attacker could exploit the vulnerability to run an external executable file...