Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-lib-terminal-integration-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4058 Malicious code in js-lib-terminal-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dcf2e5bf15d9675a00d7528be2775ff89da7335da5ba9321cdbb19d9cb9f76c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4059 Malicious code in js-lib-terminal-integration-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7503515ab3ea4e66d9467dc8c42af202ce8dd2018894ccd7c17399898d6a5f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1495 Malicious code in belvo-integration-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac824b7c99a8a91cbe9763de97d360c8def2db872f6067120575f5672bf27ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in belvo-integration-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac824b7c99a8a91cbe9763de97d360c8def2db872f6067120575f5672bf27ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sch-frontend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8df0a30057039a07f47a29f52f2ae43e6fb46fb1e63983f39b4d26aa0f719ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5960 Malicious code in sch-frontend-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8df0a30057039a07f47a29f52f2ae43e6fb46fb1e63983f39b4d26aa0f719ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3857 Malicious code in integration-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eab96423a267bad86afc0855732ba4c4d79dd8a3532d34337c43268c57dcadd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Integration Bus is vulnerable to arbitrary code execution due to json-schema (CVE-2021-3918)

Summary IBM Integration Bus is vulnerable to arbitrary code execution due to json-schema. The fix includes json-schema 0.4.0. Vulnerability Details CVEID:CVE-2021-3918 DESCRIPTION: Json-schema could allow a remote attacker to execute arbitrary code on the system, caused by an improperly controlle...

[SECURITY] Fedora 36 Update: php-8.1.7-1.fc36

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read,...

PT-2022-21716 · Typo3 · Wp-Matomo Integration

Name of the Vulnerable Software and Affected Versions: matomo integration extension versions prior to 1.3.2 Description: The issue allows for XSS due to the extension's failure to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit this issue...

@ascua/electron (0.0.227), @finsemble/finsemble-electron-adapter (>=1.0.0-beta-1, <=7.3.11) +5 more potentially affected by CVE-2022-29247 via electron (>=17.0.0, <=17.1.2)

electron NPM version =17.0.0, =1.0.0-beta-1, =0.29.10, =0.18.16, =2.0.69, =3.14.5, =6.2.5 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...

CVE-2022-32550

An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with th...

Siemens Xpedition Designer Local Elevation of Privilege Vulnerability

Xpedition Enterprise is a PCB design process that provides integration from system design definition to manufacturing execution.A local elevation of privilege vulnerability exists in Siemens Xpedition Designer, which stems from an affected application assigning incorrect access rights to a servic...

Security Bulletin: Operations Dashboard is vulnerable to denial of service by Go vulnerability CVE-2022-28327

Summary Operations Dashboard is vulnerable to denial of service by Go vulnerability CVE-2022-28327 with details below Vulnerability Details CVEID:CVE-2022-28327 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by improper input validaiton by the generic P-256 feature in...

Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft Azure

Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines. The latest safeguards include moving the shared integration runtimes...

Software AG Connx 安全漏洞

Software AG Connx is a data integration solution from Software AG, Germany. A security vulnerability exists in Software AG Connx version 6.2.0.1269 20210623 that stems from a cookie that can be issued by the application and does not have the HttpOnly flag set...

OPENSUSE-SU-2022:10007-1 Security update for caddy

This update for caddy fixes the following issues: Update to version 2.5.1: Fixed regression in Unix socket admin endpoints. Fixed regression in caddy trust commands. Hash-based load balancing policies iphash, urihash, header, and cookie use an improved highest-random-weight HRW algorithm for...