Malicious code in dcrdata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814bc447b9fcf571cf3b5214166f22702d094e8ef3275b01cdc39e7ca1e28cf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the /ptippage.cgi component of the ISnex HC-IP9100HD and ISnex HC-IP9050HD network camera microprogramming system allows a intruder to gain full access to the device.

The vulnerability of the /ptippage.cgi component of the ISnex HC-IP9100HD and ISnex HC-IP9050HD network camera microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain ful...

Malicious code in eslint-config-cap-it-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-22221

An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series allows a locally authenticated attacker with low privileges to take full control over the device. One aspect of this vulnerability is that the attacker nee...

The vulnerability of the DA50N network switch web interface allows a hacker to gain full access to the device.

The vulnerability of the DA50N network switch web interface is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...

Malicious code in fwrvstaguqhzeloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626e6abecb93b8cd83fef07bc340994d153dd2e903b79306ebabc9ad9abbdfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Apple M1 chip architecture allows a hacker to gain access to the OS’s kernel and gain full control over the vulnerable device.

The vulnerability of Apple M1 chip architecture is related to the disclosure of information through auxiliary channels. Exploiting this vulnerability can allow a hacker to gain access to the OS’s kernel and gain full control over the vulnerable device...

CVE-2022-31801 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...

Malicious code in cadence-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf5debd39aec3e771c0dda1c42d6d3ce09232bd387c3e33c6e2dfd1b7737d639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epc-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38889e06f639b709a464f200703bbb6c2ec05b025c69d1002c150cd874ee73db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owa-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb14eb03fe7358a1ac71f7f835357d50ed868b0f387e5d731feb76664e174b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duty-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d001cd5581e347ca7a86d5dda589c7fdf59f07ee4d0da52efe005686451377aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mozilla-mobile/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f81ce8fcc04e7269be2b94ee6aa1ea2abdbd3f4c8e6286e9c2db240e307ca4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @glencore/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c24fb3cfba1edf0992ba23c73a07778f089ee7b9ca09d85fa0c22155971af47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-2950 · Spacelogic +1 · Spacelogic C-Bus Application Controller +3

Name of the Vulnerable Software and Affected Versions: C-Bus Network Automation Controller - LSS5500NAC versions prior to V1.10.0 Wiser for C-Bus Automation Controller - LSS5500SHAC versions prior to V1.10.0 Clipsal C-Bus Network Automation Controller - 5500NAC versions prior to V1.10.0 Clipsal...

Malicious code in @chegg-me-components/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Ethernet software solutions WISE-4060, Adam-6050 D, and Adam.NET Utility lies in the lack of authentication attempt limits, allowing attackers to gain full access to the device.

The vulnerability of the Microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utility is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow a malicious actor to gain full access to the device remotely...

CVE-2021-33534

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device...

Weidmueller Industrial WLAN 操作系统命令注入漏洞

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. The Weidmueller Industrial WLAN devices operating system command injection vulnerability can be exploited by an attacker to take full control of the device via specially crafted network configuration information...

CVE-2020-35231

The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue that allows an attacker to bypass access controls and obtain full control of the device...