Malware in oit-lib-oracle-util

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview oit-lib-oracle-util is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in oit-lib-oracle-util (npm)

Source: amazon-inspector 63a2d32099a0c4246e0b8711f8b29d321b7d1c3a0a99e36edc367934fc9f34f3 package.json declares a dependency whose key oit-lib-oracle-util matches this package's own name and whose value is a bare HTTPS URL — https://repo.securityctrl.com/oit-lib-oracle-util — instead of a registr...

Malicious code in oit-lib-oracle-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2d32099a0c4246e0b8711f8b29d321b7d1c3a0a99e36edc367934fc9f34f3 package.json declares a dependency whose key oit-lib-oracle-util matches this package's own name and whose value is a bare HTTPS URL —...

MAL-2026-15541 Malicious code in oit-lib-oracle-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2d32099a0c4246e0b8711f8b29d321b7d1c3a0a99e36edc367934fc9f34f3 package.json declares a dependency whose key oit-lib-oracle-util matches this package's own name and whose value is a bare HTTPS URL —...

CVE-2024-6422 Pepperl+Fuchs: OIT Products can be manipulated via unintended Telnet access

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service...

CVE-2024-6421 Pepperl+Fuchs: Incorrectly configured FTP-Server in OIT Products

An unauthenticated remote attacker can read out sensitive device information through a incorrectly configured FTP service...

Pepperl+Fuchs Multiple Products Access Control Error Vulnerability

Pepperl+Fuchs OIT Series is a series of high temperature identification systems from Pepperl+Fuchs, Germany. An access control error vulnerability exists in various Pepperl+Fuchs products, which can be exploited by an unauthenticated, remote attacker to manipulate the device, stop processes, read...

Oracle Fusion Middleware OiT Component Multiple Vulnerabilities (CVE-2016-3593)

Multiple vulnerabilities exist in Oracle Fusion Middleware Outside in Technology component. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Security Bulletin: Publicly disclosed vulnerability in Oracle Outside In Technology used by IBM FileNet Content Manager

Summary Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager. Oracle OIT issues disclosed in the Oracle October 2018 Critical Patch Update. Vulnerability Details CVEID: CVE-2018-18224 DESCRIPTION: An unspecified vulnerability in...

Security Bulletin: Publicly disclosed vulnerability in Oracle Outside In Technology used by IBM FileNet Content Manager

Summary Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager. Oracle OIT issues disclosed in the Oracle April 2019 Critical Patch Update. Vulnerability Details CVEID: CVE-2019-2610 DESCRIPTION: An unspecified vulnerability in Oracl...

Security Bulletin: Multiple vulnerabilities may affect Oracle Outside In Technology (OIT) Version 8.5.3 used by IBM FileNet Content Manager and IBM Content Foundation

Summary Security Bulletin: Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager and IBM Content Foundation. Oracle OIT issues disclosed in the Oracle April 2018 Critical Patch Update. Vulnerability Details Advisory CVEs: CVEID:...

Security Bulletin: Multiple vulnerabilities may affect Oracle Outside In Technology (OIT) Version 8.5.2 in IBM FileNet Content Manager, and IBM Content Foundation

Summary Security Bulletin: Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.2 in IBM FileNet Content Manager, and IBM Content Foundation. Oracle OIT issues disclosed in the Oracle January 2017 Critical Patch Update. Vulnerability Details Advisory CVEs: CVE-2017-326...

Security Bulletin: Multiple vulnerabilities in Oracle Outside In Technology (OIT) affect FileNet Content Manager and IBM Content Foundation

Summary Security vulnerabilities exist in Oracle Outside In Technology OIT which affect the IBM FileNet Content Manager and IBM Content Foundation products. Vulnerability Details Advisory CVEs: CVE-2016-5558, CVE-2016-5574, CVE-2016-5577, CVE-2016-5578, CVE-2016-5579, CVE-2016-5588 CVEID:...

Security Bulletin: Vulnerabilies (17 total) in Oracle Outside In Technology (OIT) affect FileNet Content Manager and IBM Content Foundation

Summary Security vulnerabilities exist in Oracle Outside In Technology OIT which affect IBM FileNet Content Manager and IBM Content Foundation. Vulnerability Details Advisory CVEs: CVE-2016-3574, CVE-2016-3575, CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580,...

Security Bulletin: Multiple vulnerabilities exist with Oracle Outside In Technology (OIT) in IBM FileNet Content Manager and IBM Content Foundation.

Summary Five security vulnerabilities exist in IBM FileNet Content Manager and IBM Content Foundation. See the individual description for the details. Vulnerability Details CVEID: CVE-2015-4808 DESCRIPTION: An unspecified vulnerability in the Oracle Outside In Technology Outside In Filters...

Oracle OIT ContentAccess libvs_mwkd VwStreamSection Code Execution Vulnerability(CVE-2016-3593)

Description A partially controlled memory corruption vulnerability exists in Mac Works Database file format parsing code of Oracle Outside In Technology Content Access SDK. An unchecked pointer arithmetic leads to an out of bounds memory overwrite resulting in arbitrary code execution. Tested...

Oracle OIT IX SDK libvs_pdf arbitrary pointer access(CVE-2016-3579)

Description When parsing a specially crafted PDF document, a value derived from a file is used as a memory pointer leading to a process crash. Tested Versions Outside In IX SDK 8.5.1. Product URLs http://www.oracle.com/technetwork/middleware/content-management/oit-all-085236.html Details When...

Oracle OIT IX SDK TIFF ExtraSamples Code Execution Vulnerabiity(CVE-2016-3581)

Description While parsing a specially crafted TIFF file, a parser confussion can lead to a heap buffer overflow resulting in out of bounds memory overwrite leading to arbitrary code execution. Tested Versions Oracle Outside In IX sdk 8.5.1 Product URLs...