Malicious code in invairant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b122d04889a29a7d294f43451ea01c605d7f9bfcc1f98f86024c69b8007b2a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fork-ts-checker-webpack-lugin-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-contrib5-cop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaed4f8e5074c4986a639e08d41128df82425a2ecf9086e67025287e52d1564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in content-tep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8ff2832379350eee368aa48f6145f678929ced04843d9e5526597e8ca6a35cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rawoader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394b28028a1468e99b7aa88c13b6f076a880557557828f7af2c1984102127348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc92b2f82fd895fd66598ba50fff6e0c77ee613b3c157b32577d9d5c8470929d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcssfvlgexugsfixes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39897524ed2b285ac6faa5e1db086649824026c37cb36266d3181dda6db746da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in possnested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5499bf98d70d34501138bf621598f52c8d37bd13386e067ef0f46d7e030468a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guljshint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2631200c464ded493243d1cae6422ded696465305c19a3bb1ef0406cc5299b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gurbpautroprefixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489480b989f68da16b494bb2a489a29798ec5845edb832c40665d642ea08d9a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fuirebagseadmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f17847db0ad2df972b996bae94ebf155fcb4bbbba3e23aa23987ce8ca85823 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fieloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da7a179a6c43b3762370305347b1fec848aef633e19672c989e18676969fc331 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babeeopresetstage0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb48d42ad63d09ef1ac0868e76568b5e07906e548889f67d0d017a57a2dd757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rchive-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bcff2ccf671339cf65674ae082d163bd033ef8b52b3c605c74834fb6d5f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Frontier 输入验证错误漏洞

Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ethernet Dapps. Frontier suffers from an input validation error vulnerability that stems from the fact that it can affect the parsing of RPC results in the event of EVM recovery. In the release version, this causes t...

PT-2022-18671 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns insufficient verification of data authenticity, which can cause the software to display logic that differs from the compiled logic...

PT-2022-18697 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns a lack of integrity check support, allowing for potential data manipulation. Specifically, after establishing a connection using the SRTP...

PT-2022-18676 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue arises from improper verification of cryptographic signatures, leading to a failure in properly verifying compiled logic PDT files and data blocks data...

The vulnerability of the Proficy Machine Edition programming software for programmable logic controllers arises from incorrect restrictions on the path name to the restricted access directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Proficy Machine Edition programming software is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted .BLZ file...

Authentication flaw

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may...