Malicious code in colors-1.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f2380bbd6e6d7e99f593d63b5d305336124b1015e1d8202be080bce3510e95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worki-js-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd46f5982dc0d64dac7abec613ce7dbf5cf64558ca53ac0b983350a178136152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1951 Malicious code in cmpld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3c13bb3b49966322fab5becd074019555de4cd4e83141b1563e920f20daf48d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @thecheesecakefactory/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71fabb31bb50cd76db49e08366c812382e0fc798d55b60a116b275b7ff771b48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exeloncorp/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d8bce45ccc8c864ca9904f09e835678b8a7ea28552e20433d862f73614aa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f08a6b8256f7c6e7f8805977bc211518eaed18aab87b09a573d517a26ae9856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helloreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec45a1c95de4a77fbdf34be26004b4bce76cea86cbe654c75fc47bc96eb4099d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dig-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c176c48e859438f13c62cd8bdc00448ce481a0e839891da1ab3211df7d387bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/pim-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vor-test-project-npm-please-ignore-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76b54e7d6e1b94a5892077c4de0ac61f32b1433a136e49363c4be9d886e76c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-26248

Philips MRI 1.5T and MRI 3T Version 5.x.x assigns an owner who is outside the intended control sphere to a resource...

Philips Mri 1.5T和Philips Mri 3T 安全漏洞

Philips Mri 1.5T and Philips Mri 3T are both products of the Dutch company Philips.Philips Mri 1.5T is a magnetic resonance system. The Philips Mri 1.5T is a magnetic resonance system designed to help clinicians diagnose with confidence, explore new applications, and work efficiently.The Philips...

CVE-2021-20443

IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality such as a library from a source that is outside of the intended control sphere. IBM X-Force ID: 196619...

Path traversal

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control...

Advantech WebAccess Node Path Traversal Vulnerability (CNVD-2020-29743)

Advantech WebAccess is a browser-based SCADA software package for monitoring, data acquisition and visualization. It is used to automate complex industrial processes where remote operation is required. A path traversal vulnerability exists in Advantech WebAccess Node, which can be exploited by an...

Mail.ru: Apache Server-Status Detected

prosieben.icq.com was delegated to a partner site as a part of a partner program and this site exposes Apache server-status. An issue is related to partner host outside of ICQ control, does not affect ICQ users and was accepted outside of bug bounty scope...