Malicious code in @mcdonalds/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 209f892cf75f1cd8b9b0f27ea42f702cb0e669736268cccae4725e21136d87b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @justauth/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37394192b6abc30f211553691f86f6390f465a0443ea1a5c4df90a834cbf7dba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cvshealth/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d7e0d2368f4bb7382c9a23dcae6aba933a05bea471af92d87a31f12c48252f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-cli-extensions-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b740568cf2750a479f5dced340532a8be5b2f101c7a91b075ba636970b91c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-scripts-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42d2a82508d83227e172fae45ff15eb9a366f79d518d84ef65b1620dbe7b7d67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk_repl_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae02b51801addee1d7d9465bfadddd598ae7933bb807a06a29da4093ef17a072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ea0ed6eb9e952555479abaffce89b9ec1fabf26dab71f7e5fff8cf1b0ed57a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Disclose Critical Flaws in Industrial Access Controllers from HID Mercury

As many as four zero-day security vulnerabilities have been disclosed in the HID Mercury access controller system that's used widely in healthcare, education, transportation, and government facilities. "The vulnerabilities uncovered allowed us to demonstrate the ability to remotely unlock and loc...

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System By Trellix · June 9, 2022 This story was also written by Steve Povolny and Sam Quinn. Today at the Hardwear.io Security Trainings and Conference, Trellix Threat Labs is sharing new research into...

Malicious code in kruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f6d59849346dac98e4f140f1bee01314c9ae375a1c209717e73cc3c2fe48e8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylis-ifl4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee32869e4aa596866719fecd53f70729795c83ebace2b700e3322a45a0434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-test2/test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2768ecb9a8286366492bf441b8138e8288dcaa230ad23edc23ae4d1da9769413 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerabilities in VMware when chained together grants Full System Control

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary The Cybersecurity and Infrastructure Security Agency CISA has issued a warning to organizations about malicious actors using CVE-2022-22954 and CVE-2022-22960. This alert was published following the...

Malicious code in epic-support-prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56deb20b56f88f97b545096c3e158cb4708ada1984eac27f01ae315deb0fc0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6575bc8b9c9df76806967bea87397ecc8df21860f0a7f91b4e5a8ffc317e8db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0bc80ffed72bd61fae6dc05340437a775bd61cb786636c3fdc8ba346429cc9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1397

API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover...

CVE-2022-26854

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access...

Design/Logic Flaw

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access...