The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series allows a attacker to execute arbitrary commands and gain full control over the device.

The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over...

Malicious code in taxi-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097d1cf9ae16e020a782ddabda9f4556107a34ffa87be84afde01f013fe2e52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-http-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f641b192ea9d09801f965d0b2e909f40fbc483a2f115e45feafed0376029a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-767 Malicious code in searchband-frontend-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf78480d464f5f670ccc0e60161d713925b077a538b1790e0ca75b27f3e1bc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-565 Malicious code in lego-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f68048b64d2f636d41c97edba1631e654e4141f21d4b318622cc529eb5197ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-550 Malicious code in karma-jquery2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d521035684c4dbe2c48fd0ee90ce405fbfb292a771e6c278ad707668d648a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tvmauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a220cc126d05697459cc479fd0a6c8ed0f1b740c0b7a7228e9b7d03161774e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malicious-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfb94ffd01d87848b7f1bf2ae04932224574efbda30f7ae3ecd5520c4c57d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Core server component of Oracle Communications Converged Application Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle Communications Converged Application Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the UDP network protocol...

Vulnerability of the Cluster component: The internal operations of the Oracle MySQL Cluster database management system, which allows attackers to gain full control over the application.

Vulnerability of the Cluster component: The internal operations of the Oracle MySQL Cluster database management system are related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

Malicious code in testing-postinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92117c1864ea6df0bfd00f9d5f2f45cd011b75117f4ba545096788dcc75c0a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lagra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 425b64ce91b2bfc4d9dbd5e854c1aa054f5419aa6e4c89adc2e45cedcbc531ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in speedtestgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fdcbf7a838d1ab8733a1da6605dfb92935f0b70f7feaf91b79aba1fa85b685f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-796 Malicious code in speedtestis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c743a96167f36c8645c17cc973c214e9917149cc43cf1c45ddd97e6219d783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-46660

An unauthorized user could alter or write files with full control over the path and content of the file...

Proficy Historian 代码问题漏洞

GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. A code issue vulnerability exists in Proficy Historian v7.0 and prior versions, which arises from a code issue that allows an unauthorized user to change or write files with ful...

CVE-2022-46660

An unauthorized user could alter or write files with full control over the path and content of the file...

CVE-2022-46660

GE Digital Proficy Historian CVE-2022-46660 is a path/unsafe file write vulnerability affecting Proficy Historian (v7.0 and up per ICS advisory context). Connected sources describe exploitation via unrestricted upload of files and MSO protocol handling that allows an unauthorized user to alter or...

Malicious code in asdtestaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81207a96568ae9a6efe36a302eb8dfa7d832a0d45836428a23dc7427ac953fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in github-actions-slack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0838fb57bbc4692fe40f976eb83599cc51f263c1c3a3eb1b231cbb7939a34a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...