Malicious code in wlwz-2312-0701 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb763b3f3e8124c04be82c3c2d304cd01db01482c5a1908b2bf97ecef733ce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-sound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f77123d69642b2c93c33601cb76ca45905f45e0a6e25e03f1fb7fdc6caf2462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59696ac0bad22dd9cbcfd3def050afd1566cc7ceb5cae53659eebeca0d368f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

PT-2024-15712 · Unknown · C21 Live Encoder/Live Mosaic

Name of the Vulnerable Software and Affected Versions: C21 Live Encoder and Live Mosaic product version 5.3 Description: The issue allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise. This is due to an unrestricted upload of...

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

Authentication flaw

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

Authorization

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fibo-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69de88aac3d36d27f45dcf96193e35f6431e34fb681103b540430fda434bd659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ory-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Vulnerability in WAGO Industrial Managed Switch

WAGO Industrial Managed Switch is a series of industrial Ethernet switches from WAGO, Germany. A security vulnerability exists in the WAGO Industrial Managed Switch that originates from allowing an unauthenticated, remote attacker to inject arbitrary system commands and gain full system control...

Malicious code in f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b919f598c91daf62eb8ac34de91c6290cd75d798de1ea5f7b9c3690cab44d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5754 Improper Restriction of Excessive Authentication Attempts in Sielco PolyEco1000

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system...

Malicious code in @emon-bhai/fca-emon-bhai-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dda8cf587fd89dbb973a1ad2d9121439dd65185b74c76fe48d5425e2967f400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-layer-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4c8f846b0ddb1097d47c477e40c0ce16ee83df9e0e4d2ad331a6f638a0c0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in materialxview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b0129f95fe66ebf987bfa6a5be63ab5f66e779e9f3f2ce406d0966d43f75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mariss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8fedc08d9c32eb49c4500f9cb36ee2670f9c8ccd0491f6246e45c93fc8619a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-3767

An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...