Malicious code in multisig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb9c4b4228a3a5f5b0a57247fb0920a79451a4f5b183a7568412f2d8be3a61b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-aws-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517e9823176bb273ea7322f08c73acca00cf93f85cd107018813004a1811f088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

Malicious code in discordjs-selfbotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41c8cd33b5f7a89a15b3cd02171790bee3306235ebef0f9dc24679e89f50348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bounty-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80028b7efd67458fe4d402b82e87526778a2276963829161633e17193ad92e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sixt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db59f1b325dca20e6aa112d88e03b0238a9e4b026480cd4c74b766991cbc5ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @kibt/operation-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c471df352822441445b896723595fb8555214cc80aaa429baabfcf3bd2010e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

External Control of Assumed-Immutable Web Parameter in moodle

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

GHSA-X6GM-QQWP-76GR External Control of Assumed-Immutable Web Parameter in moodle

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

CVE-2022-30597: External Control of Assumed-Immutable Web Parameter

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

MAL-2022-245 Malicious code in @epc-libraries/data-api-versions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fc77aff4c8f44ec626ff023762b926e5407f3b269db521d9006777e956242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/dns-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 899932fc30250267552612a2fb30eb0b139b8e3503774b1fddddf95b65f6c618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-27770: External Control of Assumed-Immutable Web Parameter

The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place...

CVE-2021-27769: External Control of Assumed-Immutable Web Parameter

Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. This information may or may not be sensitive and does not automatically mean a breach is likely to occur. Overall, any information that could be used for an attack should be...

CVE-2021-43066

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer...

Xxe

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer...

The vulnerability of the Junos Fusion technology implementation in Juniper Networks’ Junos OS allows a attacker to trigger a service failure.

The vulnerability of the Junos Fusion technology implementation in Juniper Networks’ Junos OS lies in the insecure external control of critical data states. Exploiting this vulnerability could allow attackers to cause service failures...

CVE-2022-22154

In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device SD control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service DoS. An SD can get...

CVE-2022-22154

In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device SD control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service DoS. An SD can get...

Xxe

In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device SD control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service DoS. An SD can get...