MAL-2022-2205 Malicious code in cors-2.8.5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d3ac76cc6d4732cf46e90544d65c4e016ecfe5b8fe92361e1586d61b16a6e26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffab3c19a64974ad46d00beb093ba879b9a343947c72c47f7102531ce248f22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application through VRDP.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to gain full control over the application through VRDP...

MAL-2022-3867 Malicious code in internal-lib-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b271298f1e935433f4b43cdb97a3b1f713540d0c503abc6bab0050507a1ad5d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6289 Malicious code in stale-props (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b9ec16df0705291e585234cf48aa58f355eadeaf165424181e35c728757468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webbluetooth-edison-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584e358581bfe311bfd1bb428724c5cdaefe6f28189d3e64422d4b628c5f6e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80845246a6fd9c6cdc2638d9ac464a4353a8687bcb7ad02430731c0646d9d312 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mai-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40444fdff4b71d9bbfae7e0e2648d693d1c64f0bdbe1ce8e000a0f2af9f68738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the double memory release during the processing of input/output messages from the smart card. Exploiting this vulnerability allows an attacker to gain full control over the application by sending specially...

The vulnerability of the Upload component of the software environment for working with Oracle Web Applications desktop integrations allows a hacker to gain full control over the application.

The vulnerability of the Upload component of the Oracle Web Applications Desktop Integrator software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application through the use of the HTTP protocol...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the control interface of Juniper Networks’ Contrail Service Orchestration allows a attacker to enhance their privileges and gain full control over the application.

The vulnerability of the Juniper Networks Contrail Service Orchestration software platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the application...

Malicious code in maven-compiler-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 314e6207e1eff2d0ffa8de2edb81458a38f4cb93c6326291fe91105e46f67adf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DAIKIN SVMPC1 和 SVMPC2 信任管理问题漏洞

DAIKIN SVMPC1 and DAIKIN SVMPC2 are both a single-site and multi-site controller from DAIKIN Japan. A security vulnerability exists in DAIKIN SVMPC1 version 2.1.22 and earlier and SVMPC2 version 1.2.3 and earlier, which originates from a vulnerability that could allow a remote attacker to obtain...

Malicious code in harness-helm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0008cf12cac94140f089a7ba2a7d297c874737f5bfbd34256de9b47b44d084bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in darshanno1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed53ddb4a7d140a14e73dd1e70f0fca72e84826fd5c4675adfec2c75506b2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28814

Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device...

CVE-2022-22522 Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device...

Malicious code in gramin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aedce7c5914ad854598a48f88963dd961ba8d80aadb85f017ac9b72ba168af40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...