MAL-2025-13027 Malicious code in @zalastax/nolb-pas- (npm)

The package @zalastax/nolb-pas- was found to contain malicious code...

Malicious code in @core-pas/cyb-core (npm)

The package @core-pas/cyb-core was found to contain malicious code...

MAL-2025-7136 Malicious code in @core-pas/cyb-core (npm)

The package @core-pas/cyb-core was found to contain malicious code...

MAL-2025-13026 Malicious code in @zalastax/nolb-pas (npm)

The package @zalastax/nolb-pas was found to contain malicious code...

CVE-2023-45205

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.20. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to NT AUTHORITY/SYSTE...

CVE-2023-38640

A vulnerability has been identified in SICAM PAS/PQS All versions = V8.00 V8.22. The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to read and modify configuration data in the context of the applicatio...

CVE-2022-43724

A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xpcmdshell feature unauthenticated remote attackers could execute custom OS commands. At...

CVE-2022-43723

A vulnerability has been identified in SICAM PAS/PQS All versions = 7.0 V8.06. Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the...

CVE-2022-43722

A vulnerability has been identified in SICAM PAS/PQS All versions V7.0. Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that...

MAL-2025-1813 Malicious code in fp-persoonlijke-pas (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fp-persoonlijke-pas (npm)

--- -= Per source details. Do not edit below this line.=-...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 4.4.04.7, which stemmed from the Samsung Pas app's Private Info containi...

CVE-2024-5866

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch...

CVE-2024-5865

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch...

CVE-2024-5866 Arbitrary Directory Listing in Centrify PAS

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch...

CVE-2024-5866

CVE-2024-5866 (Delinea Centrify PAS): A path traversal flaw in Centrify PAS versions prior to 23.1-HF7 can list arbitrary directories outside the web app root. The issue is mitigated by upgrading to 23.1-HF7 or later (patch available). Other details: affected product/component is Centrify PAS; ro...

CVE-2024-5866 Arbitrary Directory Listing in Centrify PAS

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch...

CVE-2024-5865

CVE-2024-5865 affects Delinea Centrify PAS. The issue is a path traversal vulnerability that allows reading arbitrary files outside the web publish directory in Centrify PAS versions before 23.1-HF7; patchs are available in 23.1-HF7 and later. Impact centers on confidentiality (HIGH) with no indi...

CVE-2024-5865 Arbitrary File Reading in Centrify PAS

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch...

CVE-2024-5865 Arbitrary File Reading in Centrify PAS

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web publish directory. Versions 23.1-HF7 and on have the patch...