Malicious code in golanci-lint-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e69962c9a060f9d61253d944cc7c3573debc57053555bb4dd496618bc1b6510f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NVDA 安全漏洞

NVDA Nonvisual Desktop Access is a non-visual desktop access system open-sourced by NV Access. A security vulnerability exists in NVDA versions 2024.4.1 and 2024.4.2, which stems from the acceptance of weak passwords by the Remote Connect component, which could lead to full control of the system...

The vulnerability of UniFi Protect Camera systems lies in the lack of ability to update the firmware, allowing a violator to gain full control over the system.

The vulnerability of UniFi Protect Camera systems lies in the lack of ability to update the firmware due to incorrect verification of the certificate. Exploiting this vulnerability can allow a remote attacker to gain full control over the system...

The vulnerability of the control interface of the UniFi Protect Camera system allows a intruder to execute arbitrary code and gain full control over the system.

The vulnerability of the UniFi Protect Camera system’s control interface relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and gain full control over the system...

The vulnerability of UniFi Protect Camera systems, related to errors in the authentication process, allows a violator to gain full control over the system.

The vulnerability of UniFi Protect Camera systems lies in errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the system...

The vulnerability of the Auto-Adopt Bridge Device function in the artificial intelligence-based video surveillance system UniFi Protect allows a violator to bypass security restrictions and gain full control over the system.

The vulnerability of the Auto-Adopt Bridge Device function in the artificial intelligence-based video surveillance system UniFi Protect is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain ful...

Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fdba857c815f2790dc98795d90b7549921706c69ae2d250aedff3f22eae169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kcex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250e2784873b2d4ccedb1c0017d13580afe0f3a3c3d956afeedcc1b962cc197d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5897dae91f48c018b6b600ef276fe1c7943d5eb4af335574454aa802bf60250d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c0c6baa45c1fd069597025a6670638c1d4bff2a901b784e80e27896ce62b2fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3406bc1d90365600ac04cb2cc6fcfc8ff98c4d9050b2bc5fa598c3bb3c7da4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digifinex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34f6ee680c72ebf906fbed8f3486f2646dc8d735d0b1a3f732c50eb7ac133ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yizhifabao55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 185d2f62a8857d3e7f999d149e1c3f6ff67133772af665b6d9a44d56e5b82eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-6831 · Q Free · Q-Free Maxtime

Name of the Vulnerable Software and Affected Versions: Q-Free MaxTime versions less than or equal to 2.11.0 Description: The issue is related to a hard-coded password for the root account, allowing an unauthenticated remote attacker to execute arbitrary code with root privileges via SSH. This...

Malicious code in 52471254zqdl55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0be1df1b5a8a9651a993256d2852094f85ffe9b4e06ae25b53b3894c5a8db5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cosmwasmjs-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 034ab0b125042454171dd648c2dd4defeec7fdb36aa9db667c7cd99922881a4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Web Services component of the Oracle Hyperion Data Relationship Management data management application allows a perpetrator to gain full control over the application.

The vulnerability of the Web Services component of the Oracle Hyperion Data Relationship Management data management application relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the...

CVE-2024-11999

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

Malicious code in timesketch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f93183b686eaf1babd4ed5451b64aea3e83226fa7a581cdb026613583f96fbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...