EUVD-2019-10367

Malware in sbrugna...

CVE-2025-2903

An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform GCP using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious...

MAL-2024-8717 Malicious code in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fc256bc2ec352c5c3f508243cd7ca95fcc61510287dc1dc8a687cc12f6ec9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-G872-JWWR-VGGM Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment

Description: Remote Code Execution Vulnerability has been identified in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL admidiobaseurl/admmyfiles/messagesattachments/filename. Th...

MAL-2024-1506 Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-880 Malicious code in wlwz-2312-7808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150bf82e31ac0ddbdcfdacf8e75ed3a3bc34e68b57b64427c76ef4e231f75746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-686 Malicious code in wlwz-2312-5703 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1434c6dd4455b9791bf643c6f18857365bc27cba49db6eab7ef8da51a7f7154f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8707 Malicious code in arrays-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ca280756e331336b85903607b74f86355c7e7d889a956dc9a904f6e2c5485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-284 Malicious code in dow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb988658f2f56da926a1098d170afd2e1e17a12e9e03a418ba6022f093149d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-730 Malicious code in react-onei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 837ceaa824fe4087f1b965f397072bb8bec0a54c59997c5b9a422ba7a7ca1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-117 Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3903 Malicious code in internallib_v678 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad5eff255e4aa8537a898867d022aa72241f3cc26872cb77e10c6c3c1b412ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4121 Malicious code in kauram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c882c42c2ab8206b021d14126d2602149e73105490a622c4594a7f78b7b8c45c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4332 Malicious code in lmigzpkowdysbqaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee494d8a4fca2c7d6e9c49880e5f58dae59f93fd9deb6cb055a6ec6362033371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2607 Malicious code in duckduckhack.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0052ff314b9a16d3e634bfd02296d99e2d3dccd151fc048b3b569b41f84d5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1458 Malicious code in bankin_thechnical (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c5b9ca3265186bc02f0413021b60dd2ca80f76b0a2cb0fccd974a6e55c8e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2135 Malicious code in communication-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 043102eb41f56cdbe3a8bd01534ea2c7994b0f9c0992a500a7e2dfca313de3b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6546 Malicious code in theme-whale-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40def8d41c4b7ebb0169b850854b2a3cbdbd547e0e5e4ab2294ecf310c1b471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29483: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

PT-2022-19648

Name of the Vulnerable Software and Affected Versions ABB e-Design affected versions not specified Description The issue allows an attacker to install malicious software with SYSTEM permissions, violating the confidentiality, integrity, and availability of the target machine. This is due to...