MAL-2022-2464 Malicious code in dgse-tools-mgm-elf-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94fa3bc00924ee4412de68e128935dc2a12449d3804c9f1fc5a5977410c13c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6550 Malicious code in theremontada12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57f9f39528199f4988a41ac4bc6d51f57e7e50bc7eb77f9858b3ceebf0516fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coldstone-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d975d3878369d29c7092e7fd70ea5fb373a928396493e718b4e4f8555a0ba46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/region-only-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adroit-f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d340a87917821f16332cc13efdd1a133abf2f230303f4245672e1e6307a146d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4945 Malicious code in npm_test_nothing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2762093ac3ccb836bc8b7b5f620322cb4637be2e69a6c8128a2b3ba477ef46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general database management system for Oracle MySQL Cluster is vulnerable when operations are performed outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application through various network...

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

The vulnerability of Huawei FLMG-10 Bluetooth speakers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to gain full control over the device.

The vulnerability of Huawei FLMG-10 Bluetooth speakers’ microprogramming software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow attackers to gain full control over the device by loading specially created malware files...

Critical Bug in Everscale Wallet Could've Let Attackers Steal Cryptocurrencies

A security vulnerability has been disclosed in the web version of the Ever Surf wallet that, if successfully weaponized, could allow an attacker to gain full control over a victim's wallet. "By exploiting the vulnerability, it's possible to decrypt the private keys and seed phrases that are store...

TikTok reset account password Exploit

Exploit can reset password and get full control any TikTok account. You can change target mobile phone without any problems, because exploit use bypass 2fa vulnerability...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain full control over the application

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when buffer overflows occur during data processing. Exploiting this vulnerability can allow an attacker to gain full control over the application through various protocols...

VulnCheck KEV: CVE-2018-0125

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system...

CVE-2021-4045

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera...

CVE-2021-4045 TP-LINK Tapo C200 remote code execution vulnerability

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera...

VulnCheck KEV: CVE-2017-12240

The Dynamic Host Configuration Protocol DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system...

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

The Dynamic Host Configuration Protocol DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system...

CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...

CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...