Moxa UC 安全漏洞

The MOXA UC Series is a series of computers from the Chinese company Moxa MOXA. The Moxa UC suffers from a security vulnerability that originates from the fact that an attacker with physical access can boot the device to reboot and gain access to its BIOS, which can then be used to change command...

Malicious code in opium-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32280411ef552cdf3eb62fb622c11207ddde4e1ae3a16f05858b42e124200819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the PowerScale OneFS operating systems is related to weak password cryptography for NDMP. This allows attackers to gain full control over the system.

The vulnerability of the PowerScale OneFS operating system is related to the weak cryptography used for NDMP password protection. Exploiting this vulnerability could allow an attacker to gain full control over the system...

CVE-2022-45140

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise...

Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-v12-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de37bbf9cc617eae53807b68e85234ffba9cb109affd65d17ce5a1d922140b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

Malicious code in yandex-passport-vault-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec06c5f507c87c261fef04893899d0656796eae3510e71635067b7912f25c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frappe-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd4c91421f9d8f397b84256da7d774eaa4de780d5790b0b17a27315cc7c8479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 37 Update: qemu-7.0.0-12.fc37

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that originates from allowing an authenticated remote user to run arbitrary commands on the underlying host, which could be exploited by a...

MAL-2022-6519 Malicious code in testherejson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c63f695aeb904f6eab5e51afade94f1521960e41be223b65673ae0920df981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imagecompress-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8049f356f72fb2275e8aab8bf3db3d0a278ea04b5a0be59ce1a39f790dfa2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-23583

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diagpingadmin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system...

MAL-2022-4470 Malicious code in man-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d12d9a70c6fed6bf0d505f094550612014e752bb9b9ef0742b127c1dc65de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-6324 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a weak encoding for a NDMP password in Dell PowerScale OneFS. A malicious and privileged local attacker could potentially exploit this, leading to a full...