MAL-2023-997 Malicious code in yb-mongoengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8829ed9ae2153f8aa56bb3af22519044a987709f41bff6e0dc756734b08d41b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-993 Malicious code in yandex-yt-proto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c9f270b18c048619a98a11ad6711b3ede1d6d8ea3486df6a9825486efcae60c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-998 Malicious code in yb-trust-butils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a079ba242dc18990e551b011850b9c19eb72eec55d5b09d1842f66a9638d2e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in errorboosterclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ad53c61c65de783410bb712f1628578d9bb4ce0e63f7bd2acd059433433392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-578 Malicious code in malicious-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfb94ffd01d87848b7f1bf2ae04932224574efbda30f7ae3ecd5520c4c57d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-41003

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

Stack overflow

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41003

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

Directory traversal

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example "../../../etc/passwd"...

UBUNTU-CVE-2022-25882

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example "../../../etc/passwd"...

MAL-2023-445 Malicious code in flip-flop-flap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5a8c270e03ec6b1b69ecf3fcd5e679b1fb4616f0be367586a4bcd4e47de6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-110 Malicious code in attacker_present_helloworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9129d8a2299c74952dd32fde1d04f17434b86d0ac21e4ec06d5bedd681db53b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-1338

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.5.0-rc1 through 2.5.7 Argo CD version 2.6.0-rc4 Description The issue is related to an authorization bypass bug in Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. This bug allows a malicious Argo CD...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to...

MAL-2023-132 Malicious code in bi0s-css-3bd27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d336d45273f8a33390c42868241722a95b100229eca3109cdc11b15765a263a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-128 Malicious code in best-man-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15fa50f52202384b37b1b714460696e713ae0766713264f909b1a18d42847bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-131 Malicious code in best-man-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 857e7086f034250f74e644b60c344c9f9c781fc81531cebb43f949d09195c6c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-5520 · Sonicwall · Sonicwall Sma1000

Name of the Vulnerable Software and Affected Versions: SonicWall SMA1000 version 12.4.2 Description: The issue is a pre-authentication path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. This can be...

MAL-2023-797 Malicious code in speedtestkas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8836f24997a907538aecb95c00484874123e3c82cfc14af5aa48eba61723a6c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...