Malicious code in feishu-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced690e77cd9a3ed298ed62aa2c407b5827af4fedd7b5b8d593c146e3f642f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3006 Malicious code in feishu-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced690e77cd9a3ed298ed62aa2c407b5827af4fedd7b5b8d593c146e3f642f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in douyin-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f725588a684942b0ab79f14b1ec54c5696264a6e2b516db8b2b622088d93e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meituan-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5161a8baccee393b366e1fef2fe30c7b288b2d09fd8f519ca11c4d126d0e66fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4544 Malicious code in meituan-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5161a8baccee393b366e1fef2fe30c7b288b2d09fd8f519ca11c4d126d0e66fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1746 Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2575 Malicious code in douyin-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f725588a684942b0ab79f14b1ec54c5696264a6e2b516db8b2b622088d93e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alipay-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3849e1ac4748a634622dfc83aebe7a3e9d4e0b3c0967e062a5b573d96d30d5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-941 Malicious code in alipay-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3849e1ac4748a634622dfc83aebe7a3e9d4e0b3c0967e062a5b573d96d30d5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Spectrum Symphony is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Spectrum Symphony is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boo...

Security Bulletin: Cúram Social Program Management may be affected by Denial of Service vulnerability in jackson-databind (217968)

Summary IBM Cúram Social Program Management uses the jackson-databind libraries, for which there is a publicly known vulnerability. FasterXML jackson-databind is vulnerable to a denial of service, caused by an error when using JDK serialization to serialize and deserialize JsonNode values. By...

Security Bulletin: Rational Test Control Panel component in Rational Test Virtualization Server and Rational Test Workbench is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary Rational Test Control Panel is affected but not vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boot...

Dell Wyse Management Suite < 3.6.1 Multiple Vulnerabilities (DSA-2022-098)

The version of Dell Wyse Management Suite installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-098 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to...

Elastic Elasticsearch Java Vulnerability (ESA-2022-06)

Elastic Elasticsearch is prone to a vulnerability in Java. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:elasticsearch"...

Exploit for CVE-2022-30190

CVE-2022-30190 !N|Solidhttps://socprime.com/wp-content/up...

Security Bulletin: Multiple vulnerabilities in Java SE that could allow an unauthenticated attacker to obtain sensitive information affect IBM® Db2®. (CVE-2021-35603, CVE-2021-35550, CVE-2021-2341)

Summary Multiple vulnerabilites in Java SE that could allow an unauthenticated attacker to obtain sensitive information. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to obtain...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to denial of service due to FasterXML jackson-databind

Summary IBM Sterling Connect:Direct Web Services FasterXML jackson-databind. A denial of service vulnerability in FasterXML jackson-databind has been addressed. Vulnerability Details IBM X-Force ID: 217968 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by an...

Security Bulletin: IBM Security SOAR is using a component with multiple known vulnerabilities - IBM JDK 8.0.7.0

Summary IBM Security SOAR includes an older version of IBM JDK that may be identified and exploited. An update has been released which addresses these issues. The version of IBM JDK included in the latest version of SOAR App Host and IBM ® Security Soar is 8.0.7.5. Vulnerability Details CVEID:...

Security Bulletin: HMC is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary HMC is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Boot executable jar, ...