734 matches found
Malicious code in nfs-server-alpine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d66c21af0a19ac1a2dafd01239a6a61a590bdc133e53a71bd9527b2a2708d7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in emtoolsjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7321939016853a0b9d475c175446320711a796542c1bad74fc3efe93fc4a956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10331 Malicious code in mixpanelexpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3835238b933b46ead226a6a905afb3250547ffd233f3efc2f8f9dab538d310c The OpenSSF Package Analysis project identified 'mixpanelexpo' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...
CVE-2024-51249
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...
Malicious code in mina-payout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d3fac0ebcbae2bb6f3f11eaa7aba34269f6ed4bd1aec05e6f8e2c68952b85e1 The OpenSSF Package Analysis project identified 'mina-payout' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...
CVE-2024-51244
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function...
CVE-2024-51252
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function...
CVE-2024-51248
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the modifyrow function...
CVE-2024-51244
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function...
CVE-2024-51260
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the acmeprocess function...
CVE-2024-51258
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doSSLTunnel function...
CVE-2024-51296
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pingtrace function...
CVE-2024-51299
The Draytek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a command injection flaw. Attackers can inject malicious commands into the mainfunction.cgi component and execute arbitrary code by triggering the dumpSyslog function. Practical consequences include the ability for an a...
CVE-2024-51304
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldapsearchdn function...
CVE-2024-51257
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doCertificate function...
CVE-2024-51298
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function...
CVE-2024-51299
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the dumpSyslog function...
CVE-2024-51298
The DrayTek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a Code Injection (CWE-94) flaw. Attackers can inject malicious commands into mainfunction.cgi and achieve arbitrary command execution by calling the doGRETunnel function. This vulnerability allows for high impact on con...