Malware in mre-config-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in mre-layout-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mre-layout-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca72674752dda2346e914163e1a4ce3dd2a83b813747ebf2e4330596b0afb2c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mre-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22474e36d4ddd865818606c920d894196687008fcb57bc5488c2c682a801d5a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5617 Malicious code in mre-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22474e36d4ddd865818606c920d894196687008fcb57bc5488c2c682a801d5a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-9050

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

CVE-2020-9050

The CVE-2020-9050 entry concerns Johnson Controls Metasys Reporting Engine (MRE) Web Services, where a Path Traversal vulnerability allows a remote unauthenticated attacker to access and download arbitrary files from the system. Affected versions include MRE v2.0 and v2.1; impact is high on confi...

PT-2021-12822

Name of the Vulnerable Software and Affected Versions: Metasys Reporting Engine MRE Web Services affected versions not specified Description: A Path Traversal issue exists in the Metasys Reporting Engine MRE Web Services, allowing a remote unauthenticated attacker to access and download arbitrary...

CVE-2020-9050: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

mre.co.uk XSS vulnerability

Vulnerable URL: http://www.mre.co.uk/catalogue/keywordresults.php?strSearch="=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3561356 VIP website status:| No Check mre.co.uk SSL...