MAL-2022-6190 Malicious code in sncicd-install-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9077b8460d852a9b8afdc2a831fdb0f74e227b48f17f85ddb7ee0da67efa489c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-765 Malicious code in @xvideos/install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c707c56640def6b741e8591f6c9bbf394a899f534c0078e37a8328b8da49156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pnpm-local-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e53aa0e5484077b33dca99874f607f08f4996f8d1fa2e9fabc7b21f7aed81265 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5384 Malicious code in pnpm-local-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e53aa0e5484077b33dca99874f607f08f4996f8d1fa2e9fabc7b21f7aed81265 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdcabc89fbe9445cec97807348daae0666fd0917642c57162147d5df81333a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM QRadar Wincollect agent is vulnerable to information disclosure

Summary The IBM QRadar Wincollect standalone agent is vulnerable to sensitive information disclosure due to missing best practices. Vulnerability Details CVEID:CVE-2021-39006 DESCRIPTION: IBM QRadar WinCollect Agent could allow an attacker to obtain sensitive information due to missing best...

Fedora: Security Advisory for kernel (FEDORA-2022-b8b1e358e1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

libdtrace-ctf Required to Install Veeam Agent for Linux on Oracle Linux UEK

Challenge When installing Veeam Agent for Linux on Oracle Linux 6 or 7 with UEK kernel, the veeamsnap package fails to install with the following error: Error! Bad return status for module build on kernel: Consult /var/lib/dkms/veeamsnap//build/make.log for more information. The make.log example...

SUSE-SU-2022:2073-1 Security update for grub2

This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 bsc1198581 - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap bsc1191184 - CVE-2021-3696: Fixed that a crafted PNG image could lead to...

Siemens SINEMA Remote Connect Server data manipulation vulnerability

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunneled connections VPN between headquarters, service technicians, and installed machines or plants.Siemens SINEMA Remote Connect Server is vulnerable to a data authenticity validation error, which could b...

Vulnerability fixed in Microsoft Edge

A vulnerability has been fixed in Microsoft Edge. A remote malicious person could potentially exploit the vulnerability to execute arbitrary code. Because it is possible to get out of Edge's sandbox environment, execution of code at the SYSTEM level cannot be ruled out. Abuse requires that the...

Fedora: Security Advisory for kernel (FEDORA-2022-80cc9873be)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

Fedora: Security Advisory for kernel (FEDORA-2022-ef8c8a5925)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Dominion Voting Systems ImageCast X has an unspecified vulnerability (CNVD-2022-77548)

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems.A security vulnerability exists in Dominion Voting Systems ImageCast X, which could be exploited by an attacker to elevate the privileges of a device or install malicious...

CVE-2020-36542

A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is...

CVE-2020-36542: Improper Privilege Management

A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is...

PT-2022-8993

Name of the Vulnerable Software and Affected Versions Demokratian affected versions not specified Description A critical issue has been discovered, affecting an unknown part of the file install/install3.php, leading to privilege escalation. This can be initiated remotely. Recommendations At the...

sharp vulnerable to Command Injection in post-installation over build environment

There's a possible vulnerability in logic that is run only at npm install time when installing versions of sharp prior to the latest v0.30.5. This is not part of any runtime code, does not affect Windows users at all, and is unlikely to affect anyone that already cares about the security of their...