Lucene search
+L

2058 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/11 8:21 p.m.2 views

Malicious code in qdobjtihkplyzuwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35a71fd04a4d31b6b4e750d1da34061425ff8ab70c023b9cbc40bfd4f2befbeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/07/11 8:20 p.m.7 views

MAL-2022-5859 Malicious code in rtmcdijhqgnakfpx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d0a22ea92af0e6e6e75700b9b5065bf6ac082a929fc2ac5586a6e6bf9de481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/07/11 8:20 p.m.5 views

MAL-2022-5888 Malicious code in rysoupkizflktagx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af1f41a60fce0df1ff0f20f4c4d8cde62800c0c1c86f37ec1dbd948db50c607f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/11 8:17 p.m.3 views

Malicious code in wtbgzojhaiyermqk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ab2e9ef37efffa59d9c26f0aefc28d7e1b5b9e6cc82e000479fe25cad430dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.8 views

The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, stems from insufficient protection of registration data. This allows attackers to gain full control over the monitoring software.

The vulnerability of the Schneider Electric Data Center Expert software monitoring tool for equipment information is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain full control over the software...

9CVSS7.7AI score0.00537EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.12 views

The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, lies in the way passwords are stored in a reversible format. This allows a hacker to gain full control over the monitoring software.

The vulnerability of the Schneider Electric Data Center Expert monitoring software relates to the storage of passwords in a recoverable format. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the software...

9CVSS7.7AI score0.00476EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/08 12:16 p.m.2 views

Malicious code in tjhnl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac299b379c3d2b224af6ff6eb19e0ecf9b11a12997bb66fe9a0dbecd0e8b6162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/08 12:2 p.m.4 views

Malicious code in small-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bee317ebf983fc6131797932fc73436c62f4f95f0e963ae3622f7ab4647851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/06 6:59 p.m.4 views

Malicious code in roar-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeaacbda79e7c5ad19617406b51e22bb02a81c23eed3c203b2214bf4b255f92e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
OSV
OSV
added 2022/07/06 6:43 p.m.6 views

MAL-2022-921 Malicious code in ajax-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a42a0d791115ba30e5e048f5af09cdaff93938a6ca4a25d5af7ae617df66b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.6 views

The vulnerability of component ADF Faces in the Oracle Jdeveloper development environment allows a perpetrator to execute arbitrary code or gain full control over the application.

The vulnerability of component ADF Faces in the Oracle Jdeveloper development environment relates to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely or gain full control over the application using the HTT...

10CVSS7.6AI score
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.12 views

The vulnerability of the REST API implementation of the plugin for managing a school and its objects in the School Management Pro system, a content management system for WordPress websites, allows a malicious individual to execute arbitrary PHP code and gain full control over the application.

The vulnerability of the REST API implementation of the School Management Pro plugin for managing schools and their objects in the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code and gain fu...

10CVSS8.4AI score0.64321EPSS
SaveExploits6References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/05 11:45 a.m.3 views

Malicious code in node-colors-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca736648c36b9e93ae2e535f2bbc0fdb5b3cc16169ff6b327f935ebe0999e15e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/30 9:45 a.m.11 views

MAL-2022-4492 Malicious code in material-ui-plugin-styles-provider-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c532d2260b90e64adf2ec199da8ee4d191a0c4803afeaa57c2327d49db0c6969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/30 9:44 a.m.2 views

Malicious code in @3p-future-solutions/ember-cui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 397fc341835af149d910a487918b036cb2520795441767e7953264ec9c8a86d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/30 9:43 a.m.8 views

MAL-2022-6117 Malicious code in sichain-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90379fb824f4450fbddb1699768679b28d434ce25fc5ae734d2b8c64b40ab4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/30 9:42 a.m.4 views

MAL-2022-5529 Malicious code in purple_team_midway_teste_cenario_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28934a167292330b02fcc17d36240c4fb6daef5ea6ca4120f4ba7e10b7f53b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/27 10:19 a.m.4 views

Malicious code in discorddependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6577bf7838937492079199a51de2879d1d859228b7c04d7391bf04f0ef15a73b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.15 views

The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.

The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.6AI score0.00308EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.9 views

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool, a software platform of Oracle Fusion Middleware, allows a malicious individual to execute arbitrary code and gain full control over the application.

The vulnerability of the E-Business Suite component XDO, a reporting tool within the Oracle BI Publisher software from Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely and gain full...

9CVSS8.1AI score0.03119EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder