CVE-2024-45275 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices...

CVE-2024-45275 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices...

Malicious code in hdhh.hiijack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f90aede73c9acb03936e632fdcae78446c81d7c64d07749ea9f603f36f88d62c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9224 Malicious code in duckc2-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b9838006c36dd7525551f1e1b25b9140f9e30f9b644c64619d7735696b986ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9220 Malicious code in com.sendbird.calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673f118ef1bd121c69542e3a9d813f6e42601d38118849a030f91f89ecacd45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hubs-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72c2b5b928c9cc0211f1440d05124b34af18a3c21c7db1bb0ac7d72d12c39cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in foldl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2abd5909394808c19b6d87a3b9b46e6356ee553bed6e8fe55dfa696dc0908b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9219 Malicious code in cli-command-with-alias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b03e8947704f3b685460bd5c1a963c852f7877815be28a52d9642875d1348d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agquu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36919c509db732cc8b07bcc95c88a4b21998332aa2abc81d5a35a9340345b3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-rainbow-six-unlock-all-skins-elite-and-various-other-updated-2023-q6uukf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db8c54f4bb9ad19f21f98ee87293ddfa45b05b6953115df873afd3b5092c1b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-roblox-fishing-simulator-script-x5c6h7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d3935d85ffff584c274c803e27fe750e88812237d94029109b8e18bab26ab63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9170 Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-roblox-murder-mystery-2-h-a-c-k-script-87l2lf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dceef79eb5edb5022fd0ab761d5786442061cd22af13a908da5d0c3be177f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cap-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c67eacc7aaa76752177a54808d1dec8de27842394b3a20bcf9b51fc779b9417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asp.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7c024883d91bf9fdd3cb49b01873767cbb851c7b663fd2c1ac9d12030157b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the installation package for microprogramming software in embedded network controllers for building control systems, ASPECT Enterprise, NEXUS Series, MATRIX Series, allows a intruder to gain full control over the device.

The vulnerability of the installation package for microprogramming software in ASPECT Enterprise, NEXUS Series, and MATRIX Series embedded network controllers is related to the use of default account data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full contr...

CVE-2024-25694

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in the Layer Showcase application configuration which when clicked could potentially execute...

CVE-2024-25702 BUG-000160599 - Stored XSS in Portal for ArcGIS Web App Builder

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in the site configuration which when clicked could potentially execute arbitrary JavaScri...

CVE-2024-25702

CVE-2024-25702 describes a stored XSS in Esri Portal for ArcGIS Enterprise Sites (affected versions 10.8.1–11.1, including 11.1 and below) where a remote, authenticated attacker with high privileges can craft a link stored in the site configuration that, when clicked, executes arbitrary JavaScrip...

Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...