Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2025/06/04 12:12 a.m.•5 views

Malware in stake-operations-script

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/03 2:34 p.m.•13 views

Malicious code in stake-operations-script (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea2fd7f2b3976c6f3bab727d8bd2366c4ed8ddfbdaba9e669c7b01d1a3532e1 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2018/02/08 7:29 a.m.•12 views

CVE-2018-0113

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

8.8CVSS6.2AI score0.02227EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2018/02/08 12:00 a.m.•8 views

PT-2018-8619

Name of the Vulnerable Software and Affected Versions: Cisco UCS Central Software versions prior to 2.01c Description: A vulnerability in the operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon...

8.8CVSS0.02227EPSS
SaveExploits0References5
Cisco
Cisco
•added 2018/02/07 4:00 p.m.•62 views

Cisco UCS Central Arbitrary Command Execution Vulnerability

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

8.8CVSS1.9AI score0.02227EPSS
SaveExploits0References1
Rows per page
Query Builder