Malicious code in the-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80326e5ea00baebd679ede31f64bd96a16aa3a4e24d1158a6769bc380c19f7e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-miscrosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf09eb4d9a3bff918c5d70b7319f6734bad6fbc2d4c6975462602b53ab6f54e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apitelegram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea07ce89558075f0ae14ec35b104be366b715ccc70f4308cf8a6d8ec4e193638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-encrypt-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f59ac2ca2c204c22b2a5f11db9eef454f786803297f219aeb3e179dbe656ae07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in photos-story-animator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358cb47b9a08355f8b423f06a058d4a0622e10984c25cbb4411a8d6868208882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in group-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367a41bb86f15b9d94cbdd028f364302346088e3fc8c5d139374c43f65c05c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-1109

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

Design/Logic Flaw

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

Malicious code in dreamteam11-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f760fb2e0f1f22f54f8e0db3457dc3a9ca3d481b743d22df2ebefc64619b7284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in puik (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b4305941a7c6039839f504cec86804482541da940624e283b54bd14652ed296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sielco PolyEco Digital FM Transmitter 2.0.6 Default Credentials

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

MAL-2023-606 Malicious code in mobile-coin-block-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9186f60970b4228055c97ae3bbbf2c4691411f82c44db8033fc56d68cae50fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the client-server application for managing power supply sources in RCCMD, related to the use of pre-installed credentials, allows a perpetrator to execute arbitrary code or gain full control over the application.

The vulnerability of the client-server application for managing power supply sources in RCCMD is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain full control over the application...

GE iFIX

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Digital Equipment: iFIX Vulnerability: Code Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for privilege escalation and full control of the system. 3. TECHNICAL DETAILS 3.1...

ABB Central Licensing System Exposure of Sensitive Information to an Unauthorized Actor (CVE-2020-8481)

For ABB products ABB Ability System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody...

MAL-2023-924 Malicious code in usaa-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a0a2b3751f6688b7b93ed4f71fc77b99863442191da95fcd67f8555fe4a8e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in error-vitals-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65765054b32b6b83f5370f6ea07125ba241cd304e0ce45bae0a09a563b810f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in w00dr0w-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2175cd34f146d359b98535396682323f9f8a3b5db94624b02dc6b1b70e166ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...