8343 matches found
Malicious code in new-corgi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329cd8da11fa5ee64d20c5eb4e978eeb2ad3ee62c3e20e9ef6af372ca13a3e14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4813 Malicious code in new-corgi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329cd8da11fa5ee64d20c5eb4e978eeb2ad3ee62c3e20e9ef6af372ca13a3e14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3177 Malicious code in free-pokemon-go-coin-2022-new-pogo-coins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff9f3cc21d6b3b07fe7ac416f32e29529c03a041a3938f6ce9bdbb6ba4eeb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in new-random-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a4bc43440dea2a5ba1210e43f4bbff00f58ef3533689ac6c109e9522eda813e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4816 Malicious code in new-random-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a4bc43440dea2a5ba1210e43f4bbff00f58ef3533689ac6c109e9522eda813e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4814 Malicious code in new-fingerprint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16413c09304b223c1fba845f5c2a4cf2121d69b4005921e48caabc6cbef7f1e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in new-fingerprint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16413c09304b223c1fba845f5c2a4cf2121d69b4005921e48caabc6cbef7f1e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE-SU-2022:2137-1 Security update for golang-github-prometheus-node_exporter
This update for golang-github-prometheus-nodeexporter fixes the following issues: - CVE-2022-21698: Update vendor tarball with prometheus/clientgolang 1.11.1 bsc1196338, jscSLE-24238, jscSLE-24239 - Update to 1.3.0 CHANGE Add path label to rapl collector 2146 CHANGE Exclude filesystems under...
Malicious code in new-npm-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b2fd34a019f9d89883600a55b8b91648b8807475b80c031803d6c3382191b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2022:10015-1 Security update for firejail
This update for firejail fixes the following issues: firejail was updated to version 0.9.70: -CVE-2022-31214: - root escalation in --join logic boo1199148 Reported by Matthias Gerstner, working exploit code was provided to our development team. In the same time frame, the problem was independentl...
Security update for firejail (important)
openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2022:10016-1 Rating: important References: 1199148 Cross-References: CVE-2022-31214 CVSS scores: CVE-2022-31214 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-S...
CVE-2022-34005
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...
CVE-2022-34005
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...
Cross-site Scripting (XSS) - Stored
Description Titra is vulnerable to Stored XSS in the Task field when creating a new task in a project. Steps to reproduce 1.In the Overview tab, click on New project button. 2.Enter a project name and click Save. 3.Move to the Tasks tab in that project and click on New Task button. 4.In the Task...
Metasploit Weekly Wrap-Up
vCenter Secret Extracter Expanding on the work of the vcenterforgesamltoken auxiliary module, community contributor npm-cesium137-io has added a new module for extracting the vmdir/vmafd certificates, the IdP keypair, the VMCA root cert, and anything from vmafd that has a private key associated,...
Vulnerabilities fixed in Tenable Nessus Agent
Vulnerabilities have been fixed in Tenable Nessus Agent. The vulnerabilities allow a malicious person with elevated privileges to able to execute arbitrary code under administrator privileges and the read arbitrary files on the underlying system. Tenable has released a new version of Nessus Agent...
CVE-2022-31216
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...
Siemens SICAM GridEdge Authentication Error Vulnerability (CNVD-2022-45216)
SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...