2089 matches found
Malicious code in speedtestgo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fdcbf7a838d1ab8733a1da6605dfb92935f0b70f7feaf91b79aba1fa85b685f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in lagra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 425b64ce91b2bfc4d9dbd5e854c1aa054f5419aa6e4c89adc2e45cedcbc531ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-796 Malicious code in speedtestis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c743a96167f36c8645c17cc973c214e9917149cc43cf1c45ddd97e6219d783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-46660
An unauthorized user could alter or write files with full control over the path and content of the file...
Proficy Historian 代码问题漏洞
GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. A code issue vulnerability exists in Proficy Historian v7.0 and prior versions, which arises from a code issue that allows an unauthorized user to change or write files with ful...
CVE-2022-46660
GE Digital Proficy Historian CVE-2022-46660 is a path/unsafe file write vulnerability affecting Proficy Historian (v7.0 and up per ICS advisory context). Connected sources describe exploitation via unrestricted upload of files and MSO protocol handling that allows an unauthorized user to alter or...
CVE-2022-46660
An unauthorized user could alter or write files with full control over the path and content of the file...
MAL-2023-500 Malicious code in hiring-without-whiteboards (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c86a6c1ba7eeb700ad39245d9f6e5bd53cee80dcfdd43819e13ea756c0cc3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in github-actions-slack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0838fb57bbc4692fe40f976eb83599cc51f263c1c3a3eb1b231cbb7939a34a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in asdtestaaa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81207a96568ae9a6efe36a302eb8dfa7d832a0d45836428a23dc7427ac953fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5329 Malicious code in phup.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3505fe1eb9dd6b5d7010e73296e7952e76792f78261783958c23ebb1e88f20c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rmgjs-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13b895694dae89110a5e80c7137a8ccf64017169fe486b836eb5157c7b3f5ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Design/Logic Flaw
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device...
Multiple Old Vulnerabilities actively exploiting in Cisco Products
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Several security old vulnerabilities actively exploiting in Cisco IOS, NX-OS, and HyperFlex software, some of which can be exploited for authentication bypassing to gain full control of the impact...
Malicious code in gramin-chat1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da52b2b327f714d0fef1991f8aea017c5fe02f16f01937d7c8fcdfda52621346 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-41264
Due to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791, allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provided by the attacke...
CVE-2022-41267
SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the system causing a high impact on confidentiality, integrit...
PT-2022-25776 · Sap · Sap Basis
Name of the Vulnerable Software and Affected Versions: SAP BASIS versions 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, 791 Description: The issue allows an authenticated non-administrator attacker to access a system class and execute any of its public methods with parameters provid...
SAP Basis 代码注入漏洞
SAP Basis is a content management system. SAP Basis suffers from a code injection vulnerability that stems from the unrestricted scope of its RFC function modules allowing an authenticated, non-administrator attacker to access a system class and execute any of its public methods using...